last executing test programs: 3.993250571s ago: executing program 2 (id=4054): socketpair(0x27, 0x5, 0x8001, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r2, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="a7", 0x1}], 0x1}}], 0x1, 0x10000895) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r1, 0xf6690000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 3.992442575s ago: executing program 0 (id=4055): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000400)={r1, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.917375731s ago: executing program 2 (id=4056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r3, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x401, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x3, 0x9}, 0x10}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) sendmsg$rds(r1, 0x0, 0x4000844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200"/15], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 3.856198673s ago: executing program 0 (id=4057): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c79c7b19d5808847000000000000000000000002849d58ce7f2e82712ebe7944e60bbda2fa2ce0d411b54ff2e999ac51e1e91c6c01eb27270a1f72b67a7cff6e6021a40aa363d8a748ccb0a47e29d2bbdb14dff5606c8b2371cba2900d15f529e6108df3d0921d9f065e7b6cc722fd5ef2c81296cc96e7e2ee523fb5756a7547e6789476f92c914952a2b3ce1e7fa5b18fc819da184e794dac3584"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) socket(0x1, 0x803, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff7b) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0x2, 0x80805, 0x0) sendmsg(r0, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000006240)) recvmmsg(r0, &(0x7f0000006080), 0x0, 0x10142, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 3.783758305s ago: executing program 0 (id=4058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 3.520015869s ago: executing program 1 (id=4059): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r6, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 3.228871411s ago: executing program 1 (id=4061): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x18, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x980) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x80, 0x40, 0xffff8000, 0x2, {{0x1b, 0x4, 0x2, 0xf, 0x6c, 0x65, 0x0, 0x80, 0x2f, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xf, 0x6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @generic={0x83, 0xa, "6c884687cd412485"}, @lsrr={0x83, 0x7, 0x84, [@multicast1]}, @timestamp_prespec={0x44, 0x34, 0x65, 0x3, 0x1, [{@multicast1, 0x3}, {@loopback, 0x7}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0xa535}, {@multicast2, 0x5}, {@empty, 0x3}]}, @ra={0x94, 0x4}]}}}}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r8, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x34}}, 0x40010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x40, 0x10, 0xffffffff, 0x3, {{0x13, 0x4, 0x2, 0x6, 0x4c, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x4, "7796"}, {0x2, 0x3, "97"}, {0x6, 0x6, "3e9d9917"}]}, @cipso={0x86, 0x20, 0x3, [{0x0, 0x9, "8f241ccf3b7dfe"}, {0x54aac2d779d80962, 0x11, "36b345b1c107dcd4272392d892726f"}]}, @noop, @end, @noop]}}}}}) r12 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x200}}]}}]}, 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), 0x0, 0xb3, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote, @remote}, &(0x7f0000000700)=0xc) r17 = socket$packet(0x11, 0x3, 0x300) r18 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r18, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r18, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r19}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1bc, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000805}, 0x24008010) 3.123840695s ago: executing program 3 (id=4062): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000b00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000001e0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000230000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'vlan1\x00'}) bind$bt_sco(0xffffffffffffffff, &(0x7f00000001c0), 0x37) listen(0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYRESDEC, @ANYRES16=r3, @ANYRESOCT=r5, @ANYRES8=r1, @ANYRESDEC=r7, @ANYRES64=r3, @ANYRESHEX], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet_icmp(0x2, 0x2, 0x1) write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) 3.039554315s ago: executing program 2 (id=4063): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r6, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 3.002596171s ago: executing program 3 (id=4064): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 2.823955993s ago: executing program 1 (id=4065): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r3, 0x701, 0xfffffffc, 0x25dfdbfc, {0x41}}, 0x14}}, 0x4c040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}, @IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x1}}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) 2.789419386s ago: executing program 2 (id=4066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, r2, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 2.730124303s ago: executing program 0 (id=4067): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x7}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x2}]}]}, 0xfc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f43ea745d1b29a3e39f94d6e9aff1c372e7031cdd88ac98db0edb663726d31c9cf96d18e34613a6e15e471da25e1a9f56a0350", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf250100000014000200ff010000000000000000000000000001080004000a0101012700070073797374656d5f753a6f626a6563745f723a6170745f7661725f6c69625f743a7330000008000500ffffffff08000400e0000002"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044814) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4030141}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r9, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}}, 0x4040004) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r10, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x500000007}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x4004020) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x30}}, 0x8000) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) sendmsg$alg(r8, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4011}, 0x40) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xec1b3000) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0xfdef) 2.600804749s ago: executing program 1 (id=4068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf34) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000001900000000000000ef0e00"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a000000000000340900f4f8ffffffb702000008000000b7030000ffffffff15000000060000003d93000000000000b5030000020000008500000076000000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x101, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) 2.352754698s ago: executing program 4 (id=4069): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x2e7}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000041000020073797a310000000008000a40fffffffc090001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.225845887s ago: executing program 4 (id=4070): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='qdisc_enqueue\x00', r0}, 0xf) socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.116465517s ago: executing program 1 (id=4071): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.965325579s ago: executing program 4 (id=4072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf34) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000001900000000000000ef0e00"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a000000000000340900f4f8ffffffb702000008000000b7030000ffffffff15000000060000003d93000000000000b50300000200"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x101, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) 1.571977772s ago: executing program 0 (id=4073): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r3, 0x0, 0x0, 0x80000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.533864496s ago: executing program 3 (id=4074): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r7, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.430166477s ago: executing program 4 (id=4075): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$can_bcm(0x1d, 0x2, 0x2) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 1.391561762s ago: executing program 2 (id=4076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 678.246594ms ago: executing program 1 (id=4077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 665.036009ms ago: executing program 4 (id=4078): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x40008, 0x800008}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r5) setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0xc0b0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r8, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed11076f8577e8b3df96c38119a4740fa5b6cfa742028555d065e91cda2a8e874fdf4a8bb77cfd9cdc0da81d6a1d91de9ec8", 0x68, 0x6000c804, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 623.812509ms ago: executing program 0 (id=4079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r3], 0x44}}, 0x20008040) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9, r9}, &(0x7f0000000600), &(0x7f0000000640)=r8}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd44000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r12}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r13, &(0x7f0000000180), 0x40010) 604.330079ms ago: executing program 3 (id=4080): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r4 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r3) close(r4) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80010000100001000000000000000000ac1414bb000000000000000000000000ac141426000000000000000000000000000000004e2300000000300000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003c000000ac1414bb0000000000000000000000131d7a460000000000000000000000000000000000000000000100000000000000000000000000000003000000000000000000000000000000ff010000000000000000000000000000feff5fc1ffffffff0000000000000000000000000000004001000000000000000000000000000000000000000a0000000000000000000000480001"], 0x180}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4020}, 0x20008084) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 464.147152ms ago: executing program 3 (id=4081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf34) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000001900000000000000ef0e00"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a000000000000340900f4f8ffffffb702000008000000b7030000ffffffff15000000060000003d93000000000000b5030000020000008500000076000000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x101, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) 254.015263ms ago: executing program 2 (id=4082): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={r4, r5+10000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 115.20114ms ago: executing program 3 (id=4083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000012c0)=0xe) accept4(r2, 0x0, 0x0, 0x80000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100), 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0xa401000000000000) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, @dev={0xfe, 0x80, '\x00', 0x2e}}}}}, &(0x7f0000000080)={0x0, 0x3, [0xa37, 0x8e3, 0x500, 0x8e6]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18) 0s ago: executing program 4 (id=4084): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) kernel console output (not intermixed with test programs): 757] netlink: 'syz.3.1636': attribute type 6 has an invalid length. [ 213.543828][T11784] hsr0 speed is unknown, defaulting to 1000 [ 213.595306][T11783] batadv_slave_1: left allmulticast mode [ 213.602179][T11783] dvmrp8: left allmulticast mode [ 214.011689][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1652'. [ 214.154744][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 214.156149][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.327862][T11832] syz_tun: entered allmulticast mode [ 214.342989][T11832] dvmrp8: entered allmulticast mode [ 214.381276][T11833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1657'. [ 214.391814][T11832] lo speed is unknown, defaulting to 1000 [ 214.425708][T11836] netlink: 'syz.4.1659': attribute type 23 has an invalid length. [ 214.608991][T11841] lo speed is unknown, defaulting to 1000 [ 214.610072][T11832] hsr0 speed is unknown, defaulting to 1000 [ 214.839396][T11831] syz_tun: left allmulticast mode [ 214.845074][T11831] dvmrp8: left allmulticast mode [ 214.889511][T11841] hsr0 speed is unknown, defaulting to 1000 [ 214.895815][T11839] lo speed is unknown, defaulting to 1000 [ 215.019140][T11849] netlink: 'syz.1.1661': attribute type 6 has an invalid length. [ 215.102857][T11839] hsr0 speed is unknown, defaulting to 1000 [ 215.147093][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 215.196047][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.620741][T11880] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1672'. [ 216.193363][T11903] syzkaller1: entered promiscuous mode [ 216.224924][T11903] syzkaller1: entered allmulticast mode [ 216.235967][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 216.634347][T11931] syz_tun: entered allmulticast mode [ 216.654635][T11931] dvmrp8: entered allmulticast mode [ 216.688614][T11931] lo speed is unknown, defaulting to 1000 [ 216.776891][T11939] netlink: 'syz.4.1691': attribute type 23 has an invalid length. [ 217.000159][T11946] syzkaller1: entered promiscuous mode [ 217.005675][T11946] syzkaller1: entered allmulticast mode [ 217.276251][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.330437][T11931] hsr0 speed is unknown, defaulting to 1000 [ 217.381843][T11930] syz_tun: left allmulticast mode [ 217.414551][T11930] dvmrp8: left allmulticast mode [ 217.849768][T11985] lo speed is unknown, defaulting to 1000 [ 218.073969][T11985] hsr0 speed is unknown, defaulting to 1000 [ 218.316041][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 218.363929][T12004] lo speed is unknown, defaulting to 1000 [ 218.394210][T12006] syzkaller1: entered promiscuous mode [ 218.400427][T12006] syzkaller1: entered allmulticast mode [ 218.514918][T12004] hsr0 speed is unknown, defaulting to 1000 [ 218.713222][T12014] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 218.982541][T12029] lo speed is unknown, defaulting to 1000 [ 219.179615][T12029] hsr0 speed is unknown, defaulting to 1000 [ 219.355980][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 219.735228][T12059] lo speed is unknown, defaulting to 1000 [ 220.065644][T12059] hsr0 speed is unknown, defaulting to 1000 [ 220.071012][T12068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.092436][T12068] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.101364][T12068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.319676][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1736'. [ 220.396224][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.557425][T12090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1737'. [ 220.975215][T12096] lo speed is unknown, defaulting to 1000 [ 221.212878][T12096] hsr0 speed is unknown, defaulting to 1000 [ 221.341755][T12124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1750'. [ 221.435987][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 221.737822][T12146] lo speed is unknown, defaulting to 1000 [ 222.040297][T12146] hsr0 speed is unknown, defaulting to 1000 [ 222.155425][T12164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1762'. [ 222.320433][T12177] tls_set_device_offload: netdev not found [ 222.475971][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.770167][T12195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1774'. [ 223.074158][T12216] lo speed is unknown, defaulting to 1000 [ 223.154236][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 223.266550][T12216] hsr0 speed is unknown, defaulting to 1000 [ 223.430173][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1785'. [ 223.513934][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 223.522996][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 224.428817][T12276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1798'. [ 224.490138][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 224.505339][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.533119][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.545037][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.557164][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 224.566611][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.718865][T12302] lo speed is unknown, defaulting to 1000 [ 224.929159][T12305] lo speed is unknown, defaulting to 1000 [ 224.947380][T12302] hsr0 speed is unknown, defaulting to 1000 [ 225.072424][T12305] hsr0 speed is unknown, defaulting to 1000 [ 225.468484][T12317] batadv_slave_1: entered allmulticast mode [ 225.502448][T12317] dvmrp8: entered allmulticast mode [ 225.596020][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 225.669425][T12317] lo speed is unknown, defaulting to 1000 [ 225.692177][T12333] netlink: 'syz.1.1807': attribute type 23 has an invalid length. [ 226.041711][T12317] hsr0 speed is unknown, defaulting to 1000 [ 226.103275][T12316] batadv_slave_1: left allmulticast mode [ 226.120452][T12316] dvmrp8: left allmulticast mode [ 226.467742][T12357] lo speed is unknown, defaulting to 1000 [ 226.635960][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 226.756383][T12372] lo speed is unknown, defaulting to 1000 [ 226.807528][T12357] hsr0 speed is unknown, defaulting to 1000 [ 226.882432][T12392] netlink: 'syz.3.1827': attribute type 6 has an invalid length. [ 226.908743][T12372] hsr0 speed is unknown, defaulting to 1000 [ 227.008482][T12391] lo speed is unknown, defaulting to 1000 [ 227.262885][T12391] hsr0 speed is unknown, defaulting to 1000 [ 227.270946][T12396] netlink: 'syz.4.1831': attribute type 6 has an invalid length. [ 227.676130][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 227.684182][T12414] batadv_slave_1: entered allmulticast mode [ 227.730083][T12414] dvmrp8: entered allmulticast mode [ 227.835339][T12414] lo speed is unknown, defaulting to 1000 [ 227.880155][T12422] netlink: 'syz.1.1836': attribute type 23 has an invalid length. [ 228.124369][T12414] hsr0 speed is unknown, defaulting to 1000 [ 228.148485][T12428] lo speed is unknown, defaulting to 1000 [ 228.335882][T12413] batadv_slave_1: left allmulticast mode [ 228.414910][T12413] dvmrp8: left allmulticast mode [ 228.592767][T12428] hsr0 speed is unknown, defaulting to 1000 [ 228.715982][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 228.845765][T12459] syz_tun: entered allmulticast mode [ 228.871469][T12459] dvmrp8: entered allmulticast mode [ 228.953606][T12465] netlink: 'syz.2.1852': attribute type 23 has an invalid length. [ 228.993441][T12459] lo speed is unknown, defaulting to 1000 [ 229.342111][T12459] hsr0 speed is unknown, defaulting to 1000 [ 229.594830][T12458] syz_tun: left allmulticast mode [ 229.602863][T12458] dvmrp8: left allmulticast mode [ 229.755962][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 229.960896][T12497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1865'. [ 230.453774][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 230.493078][T12516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.516752][T12516] bond1: (slave batadv2): Opening slave failed [ 230.714432][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 230.735026][T12539] netlink: 'syz.0.1882': attribute type 14 has an invalid length. [ 230.748987][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 230.758600][T12539] netlink: 'syz.0.1882': attribute type 14 has an invalid length. [ 230.796035][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 230.856773][T12549] lo speed is unknown, defaulting to 1000 [ 230.973578][T12549] hsr0 speed is unknown, defaulting to 1000 [ 231.349715][T12549] netlink: 'syz.4.1887': attribute type 6 has an invalid length. [ 231.835966][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 231.852741][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 232.085256][T12585] lo speed is unknown, defaulting to 1000 [ 232.091850][T12591] tipc: Started in network mode [ 232.097282][T12591] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 232.135324][T12591] tipc: Enabling of bearer rejected, failed to enable media [ 232.144386][T12592] netlink: 'syz.0.1896': attribute type 23 has an invalid length. [ 232.388711][T12585] hsr0 speed is unknown, defaulting to 1000 [ 232.393646][T12610] lo speed is unknown, defaulting to 1000 [ 232.654172][T12610] hsr0 speed is unknown, defaulting to 1000 [ 232.675214][T12615] netlink: 'syz.1.1910': attribute type 1 has an invalid length. [ 232.875961][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 232.966405][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 232.985002][T12628] batadv_slave_1: entered allmulticast mode [ 233.039284][T12628] dvmrp8: entered allmulticast mode [ 233.078958][T12626] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 233.092963][T12626] team0: Device ipvlan2 is already an upper device of the team interface [ 233.149753][T12628] lo speed is unknown, defaulting to 1000 [ 233.191413][T12630] netlink: 'syz.1.1915': attribute type 23 has an invalid length. [ 233.324246][T12628] hsr0 speed is unknown, defaulting to 1000 [ 233.403428][T12627] batadv_slave_1: left allmulticast mode [ 233.411087][T12627] dvmrp8: left allmulticast mode [ 233.432176][T12648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1921'. [ 233.722619][T12657] syzkaller0: refused to change device tx_queue_len [ 233.811629][T12661] lo speed is unknown, defaulting to 1000 [ 233.915962][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 233.944085][T12661] hsr0 speed is unknown, defaulting to 1000 [ 234.193385][T12679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1932'. [ 234.252225][T12670] netlink: 'syz.2.1927': attribute type 6 has an invalid length. [ 234.277896][T12683] batadv_slave_1: entered allmulticast mode [ 234.294378][T12683] dvmrp8: entered allmulticast mode [ 234.361930][T12683] lo speed is unknown, defaulting to 1000 [ 234.396209][T12688] netlink: 'syz.1.1934': attribute type 23 has an invalid length. [ 234.629319][T12683] hsr0 speed is unknown, defaulting to 1000 [ 234.826696][T12682] batadv_slave_1: left allmulticast mode [ 234.832457][T12682] dvmrp8: left allmulticast mode [ 234.863434][T12693] lo speed is unknown, defaulting to 1000 [ 234.879154][T12701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1938'. [ 234.956010][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 235.020476][T12693] hsr0 speed is unknown, defaulting to 1000 [ 235.139690][T12714] syz_tun: entered allmulticast mode [ 235.215623][T12714] dvmrp8: entered allmulticast mode [ 235.263059][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 235.283603][T12719] macvtap1: entered promiscuous mode [ 235.293023][T12719] erspan0: entered promiscuous mode [ 235.305737][T12719] macvtap1: entered allmulticast mode [ 235.311643][T12719] erspan0: entered allmulticast mode [ 235.323491][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 235.334430][T12719] erspan0: left allmulticast mode [ 235.340128][T12719] erspan0: left promiscuous mode [ 235.352037][T12717] lo speed is unknown, defaulting to 1000 [ 235.369254][T12714] netlink: 'syz.2.1946': attribute type 23 has an invalid length. [ 235.534805][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 235.560462][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.573051][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 235.583187][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.601586][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.619077][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.629664][T12727] lo speed is unknown, defaulting to 1000 [ 235.678253][T12735] netlink: 'syz.1.1955': attribute type 39 has an invalid length. [ 235.736820][T12727] hsr0 speed is unknown, defaulting to 1000 [ 235.754262][T12717] hsr0 speed is unknown, defaulting to 1000 [ 235.841680][T12713] syz_tun: left allmulticast mode [ 235.859693][T12713] dvmrp8: left allmulticast mode [ 235.996026][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 236.244754][T12758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1959'. [ 236.257472][T12757] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 236.763336][T12777] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1969'. [ 236.792526][T12779] lo speed is unknown, defaulting to 1000 [ 236.824538][T12780] netlink: 'syz.3.1970': attribute type 23 has an invalid length. [ 237.036036][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 237.060875][T12779] hsr0 speed is unknown, defaulting to 1000 [ 237.241092][T12806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1981'. [ 237.803457][T12823] lo speed is unknown, defaulting to 1000 [ 238.044917][T12823] hsr0 speed is unknown, defaulting to 1000 [ 238.076038][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 238.092395][T12829] syzkaller1: entered promiscuous mode [ 238.116657][T12829] syzkaller1: entered allmulticast mode [ 238.208862][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1992'. [ 239.116046][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 239.196218][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 239.719625][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 239.742345][T12919] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2021'. [ 239.854813][T12924] lo speed is unknown, defaulting to 1000 [ 239.893198][T12926] netlink: 'syz.3.2023': attribute type 23 has an invalid length. [ 239.952921][T12928] netlink: 'syz.4.2024': attribute type 10 has an invalid length. [ 239.970943][T12928] team0: Port device 0! added [ 239.985761][T12928] netlink: 'syz.4.2024': attribute type 10 has an invalid length. [ 239.995544][T12928] team0: Failed to send port change of device 0! via netlink (err -105) [ 240.021580][T12928] team0: Failed to send options change via netlink (err -105) [ 240.029960][T12928] team0: Failed to send port change of device 0! via netlink (err -105) [ 240.039191][T12928] team0: Port device 0! removed [ 240.047485][T12928] bond0: (slave 0!): Enslaving as an active interface with an up link [ 240.057160][T12924] hsr0 speed is unknown, defaulting to 1000 [ 240.122025][T12930] syzkaller1: entered promiscuous mode [ 240.131597][T12930] syzkaller1: entered allmulticast mode [ 240.156135][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 240.289666][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2028'. [ 240.309994][ T5160] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.318936][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2028'. [ 240.329147][ T5160] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.342564][ T5160] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.362710][ T5160] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.462437][T12943] lo speed is unknown, defaulting to 1000 [ 240.587464][T12943] hsr0 speed is unknown, defaulting to 1000 [ 240.975732][T12943] netlink: 'syz.2.2031': attribute type 6 has an invalid length. [ 241.149059][T12976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2040'. [ 241.196002][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 241.344964][T12979] lo speed is unknown, defaulting to 1000 [ 241.677398][T12987] lo speed is unknown, defaulting to 1000 [ 241.717887][T12979] hsr0 speed is unknown, defaulting to 1000 [ 241.851766][T12987] hsr0 speed is unknown, defaulting to 1000 [ 242.187986][T13015] lo speed is unknown, defaulting to 1000 [ 242.236018][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 242.265414][T13019] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2051'. [ 242.410683][T13015] hsr0 speed is unknown, defaulting to 1000 [ 242.785404][T13039] lo speed is unknown, defaulting to 1000 [ 242.918455][T13015] netlink: 'syz.0.2052': attribute type 6 has an invalid length. [ 242.950373][T13043] syz_tun: entered allmulticast mode [ 242.977483][T13039] hsr0 speed is unknown, defaulting to 1000 [ 242.993039][T13043] dvmrp8: entered allmulticast mode [ 243.159823][T13052] netlink: 'syz.2.2060': attribute type 23 has an invalid length. [ 243.210682][T13039] netlink: 'syz.1.2059': attribute type 6 has an invalid length. [ 243.275993][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 243.356576][T13043] lo speed is unknown, defaulting to 1000 [ 243.683728][T13043] hsr0 speed is unknown, defaulting to 1000 [ 243.775592][T13040] syz_tun: left allmulticast mode [ 243.797791][T13040] dvmrp8: left allmulticast mode [ 243.910960][T13069] tipc: Enabling of bearer rejected, already enabled [ 244.272281][T13093] lo speed is unknown, defaulting to 1000 [ 244.482211][T13093] hsr0 speed is unknown, defaulting to 1000 [ 244.970476][T13093] netlink: 'syz.4.2077': attribute type 6 has an invalid length. [ 245.345277][T13145] lo speed is unknown, defaulting to 1000 [ 245.378551][T13149] netlink: 'syz.3.2095': attribute type 23 has an invalid length. [ 245.718167][T13145] hsr0 speed is unknown, defaulting to 1000 [ 245.759395][T13159] lo speed is unknown, defaulting to 1000 [ 246.044667][T13171] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 246.282129][T13160] lo speed is unknown, defaulting to 1000 [ 246.390652][T13159] hsr0 speed is unknown, defaulting to 1000 [ 246.396774][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 246.481679][T13183] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 246.523101][T13160] hsr0 speed is unknown, defaulting to 1000 [ 246.572278][T13187] lo speed is unknown, defaulting to 1000 [ 246.739350][T13187] hsr0 speed is unknown, defaulting to 1000 [ 246.873466][T13190] lo speed is unknown, defaulting to 1000 [ 247.085143][T13190] hsr0 speed is unknown, defaulting to 1000 [ 247.169486][T13187] netlink: 'syz.1.2105': attribute type 6 has an invalid length. [ 247.384504][T13212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2110'. [ 247.427613][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'. [ 247.436017][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 247.465984][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2111'. [ 248.323717][T13253] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2125'. [ 248.392827][T13257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2128'. [ 248.476017][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 248.743874][T13277] lo speed is unknown, defaulting to 1000 [ 248.844135][T13287] tipc: Enabled bearer , priority 0 [ 248.981282][T13287] syzkaller0: entered promiscuous mode [ 248.995445][T13287] syzkaller0: entered allmulticast mode [ 249.057268][T13287] tipc: Resetting bearer [ 249.077291][T13277] hsr0 speed is unknown, defaulting to 1000 [ 249.245304][T13283] tipc: Resetting bearer [ 249.342533][T13283] tipc: Disabling bearer [ 249.516026][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.720945][T13329] lo speed is unknown, defaulting to 1000 [ 249.841911][T13329] hsr0 speed is unknown, defaulting to 1000 [ 249.952670][T13340] lo speed is unknown, defaulting to 1000 [ 250.076805][T13351] syzkaller1: entered promiscuous mode [ 250.085623][T13351] syzkaller1: entered allmulticast mode [ 250.128253][T13340] hsr0 speed is unknown, defaulting to 1000 [ 250.205550][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'. [ 250.555963][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 250.919790][T13390] lo speed is unknown, defaulting to 1000 [ 251.057262][T13390] hsr0 speed is unknown, defaulting to 1000 [ 251.307925][T13390] netlink: 'syz.1.2168': attribute type 6 has an invalid length. [ 251.595999][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 251.903649][T13434] lo speed is unknown, defaulting to 1000 [ 252.002304][T13434] hsr0 speed is unknown, defaulting to 1000 [ 252.237493][T13434] netlink: 'syz.1.2180': attribute type 6 has an invalid length. [ 252.415390][T13453] lo speed is unknown, defaulting to 1000 [ 252.636264][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 252.657556][T13453] hsr0 speed is unknown, defaulting to 1000 [ 252.974908][T13453] netlink: 'syz.0.2185': attribute type 6 has an invalid length. [ 253.190607][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2194'. [ 253.460287][T13486] lo speed is unknown, defaulting to 1000 [ 253.624696][T13486] hsr0 speed is unknown, defaulting to 1000 [ 253.675983][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 253.959728][T13486] netlink: 'syz.2.2195': attribute type 6 has an invalid length. [ 254.027268][T13504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2199'. [ 254.598185][T13525] lo speed is unknown, defaulting to 1000 [ 254.715951][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.774942][T13525] hsr0 speed is unknown, defaulting to 1000 [ 254.876244][T13542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2210'. [ 255.120702][T13525] netlink: 'syz.2.2207': attribute type 6 has an invalid length. [ 255.171346][T13555] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.258000][T13560] lo speed is unknown, defaulting to 1000 [ 255.316718][T13560] hsr0 speed is unknown, defaulting to 1000 [ 255.667020][T13563] netlink: 'syz.0.2217': attribute type 6 has an invalid length. [ 255.672592][T13568] lo speed is unknown, defaulting to 1000 [ 255.755963][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.844245][T13571] lo speed is unknown, defaulting to 1000 [ 255.846081][T13568] hsr0 speed is unknown, defaulting to 1000 [ 255.880677][T13577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2221'. [ 256.191358][T13571] hsr0 speed is unknown, defaulting to 1000 [ 256.284171][T13593] syzkaller1: entered promiscuous mode [ 256.290389][T13593] syzkaller1: entered allmulticast mode [ 256.302786][T13591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2225'. [ 256.319677][T13594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2227'. [ 256.796007][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.796784][T13617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2237'. [ 256.846482][T13624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2239'. [ 256.903912][T13626] batadv_slave_1: entered promiscuous mode [ 256.951765][T13628] syzkaller1: entered promiscuous mode [ 256.963103][T13628] syzkaller1: entered allmulticast mode [ 257.132746][T13638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2244'. [ 257.422875][T13649] lo speed is unknown, defaulting to 1000 [ 257.463461][T13653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2251'. [ 257.618547][T13649] hsr0 speed is unknown, defaulting to 1000 [ 257.686045][T13668] lo speed is unknown, defaulting to 1000 [ 257.835952][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 257.868470][T13668] hsr0 speed is unknown, defaulting to 1000 [ 257.962135][T13678] syzkaller1: entered promiscuous mode [ 257.974343][T13678] syzkaller1: entered allmulticast mode [ 258.179265][T13691] netlink: 'syz.0.2261': attribute type 17 has an invalid length. [ 258.412781][T13700] __nla_validate_parse: 1 callbacks suppressed [ 258.412802][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2263'. [ 258.427311][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 258.437871][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'. [ 258.439148][ T5160] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.468636][ T5160] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.479482][ T5160] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.488876][ T5160] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.508599][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 258.523468][ T5160] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.541514][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'. [ 258.543553][ T5160] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.566806][ T5160] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.575651][ T5160] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.664315][T13709] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2265'. [ 258.866520][T13721] sctp: [Deprecated]: syz.0.2271 (pid 13721) Use of int in max_burst socket option. [ 258.866520][T13721] Use struct sctp_assoc_value instead [ 258.875987][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 259.087755][T13731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2273'. [ 259.269662][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2274'. [ 259.695610][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2285'. [ 259.720041][T13762] veth1: entered promiscuous mode [ 259.748883][T13762] bridge2: entered promiscuous mode [ 259.769322][T13762] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 259.788099][T13762] hsr1: entered promiscuous mode [ 259.841961][T13769] netlink: 'syz.0.2287': attribute type 10 has an invalid length. [ 259.916020][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 259.938807][T13747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.197719][T13779] lo speed is unknown, defaulting to 1000 [ 260.310413][T13779] hsr0 speed is unknown, defaulting to 1000 [ 260.479880][T13790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2292'. [ 260.824672][T13804] lo speed is unknown, defaulting to 1000 [ 260.956082][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.232809][T13804] hsr0 speed is unknown, defaulting to 1000 [ 261.995952][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.023958][T13849] batadv_slave_1: entered allmulticast mode [ 262.049006][T13849] dvmrp8: entered allmulticast mode [ 262.096165][T13849] lo speed is unknown, defaulting to 1000 [ 262.121240][T13853] netlink: 'syz.1.2310': attribute type 23 has an invalid length. [ 262.363820][T13849] hsr0 speed is unknown, defaulting to 1000 [ 262.415727][T13848] batadv_slave_1: left allmulticast mode [ 262.422166][T13848] dvmrp8: left allmulticast mode [ 263.035948][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 263.334133][T13883] lo speed is unknown, defaulting to 1000 [ 263.583433][T13883] hsr0 speed is unknown, defaulting to 1000 [ 263.741441][T13909] lo speed is unknown, defaulting to 1000 [ 263.835452][T13909] hsr0 speed is unknown, defaulting to 1000 [ 263.846643][T13883] netlink: 'syz.0.2321': attribute type 6 has an invalid length. [ 264.007058][T13909] netlink: 'syz.1.2329': attribute type 6 has an invalid length. [ 264.075944][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 264.822766][T13947] lo speed is unknown, defaulting to 1000 [ 264.984243][T13953] __nla_validate_parse: 2 callbacks suppressed [ 264.984262][T13953] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 265.115945][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 265.175636][T13956] syz_tun: entered allmulticast mode [ 265.233796][T13956] dvmrp8: entered allmulticast mode [ 265.370262][T13957] netlink: 'syz.4.2340': attribute type 23 has an invalid length. [ 265.690674][T13959] lo speed is unknown, defaulting to 1000 [ 265.773744][T13947] hsr0 speed is unknown, defaulting to 1000 [ 265.807200][T13966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2342'. [ 266.016366][T13955] syz_tun: left allmulticast mode [ 266.026713][T13955] dvmrp8: left allmulticast mode [ 266.156003][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 266.194350][T13956] lo speed is unknown, defaulting to 1000 [ 266.371553][T13964] netlink: 'syz.2.2341': attribute type 6 has an invalid length. [ 266.495785][T13956] hsr0 speed is unknown, defaulting to 1000 [ 266.524206][T13968] lo speed is unknown, defaulting to 1000 [ 266.588320][T13959] hsr0 speed is unknown, defaulting to 1000 [ 266.686333][T13971] netlink: 'syz.3.2343': attribute type 6 has an invalid length. [ 266.851077][T13968] hsr0 speed is unknown, defaulting to 1000 [ 267.195947][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 267.292943][T13986] lo speed is unknown, defaulting to 1000 [ 267.484231][T13986] hsr0 speed is unknown, defaulting to 1000 [ 267.731549][T13986] netlink: 'syz.3.2347': attribute type 6 has an invalid length. [ 268.198353][ T5160] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.235988][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.311819][ T5160] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.335496][ T5160] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.361161][ T5160] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.389985][T14023] lo speed is unknown, defaulting to 1000 [ 268.630996][T14023] hsr0 speed is unknown, defaulting to 1000 [ 268.698864][T14032] lo speed is unknown, defaulting to 1000 [ 268.837974][T14032] hsr0 speed is unknown, defaulting to 1000 [ 268.980363][T14032] netlink: 'syz.0.2358': attribute type 6 has an invalid length. [ 269.105746][T14056] syz_tun: entered allmulticast mode [ 269.171212][T14055] syz_tun: left allmulticast mode [ 269.277547][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 269.358606][T14060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2364'. [ 269.573047][T14072] nbd: must specify at least one socket [ 270.001717][T14078] tipc: Enabled bearer , priority 0 [ 270.033937][T14078] syzkaller0: entered promiscuous mode [ 270.041429][T14078] syzkaller0: entered allmulticast mode [ 270.079118][T14078] tipc: Resetting bearer [ 270.085432][T14080] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2372'. [ 270.126589][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'. [ 270.126949][T14077] tipc: Resetting bearer [ 270.171656][T14077] tipc: Disabling bearer [ 270.282369][T14090] lo speed is unknown, defaulting to 1000 [ 270.316022][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 270.337178][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2376'. [ 270.693218][T14090] hsr0 speed is unknown, defaulting to 1000 [ 271.356049][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.424164][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2380'. [ 271.862478][T14138] tipc: Started in network mode [ 271.883474][T14138] tipc: Node identity 080211000001, cluster identity 4711 [ 271.891578][T14138] tipc: Enabled bearer , priority 0 [ 271.900518][T14141] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 271.995970][T14141] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 272.019356][T14141] tipc: Resetting bearer [ 272.079648][T14154] tipc: Resetting bearer [ 272.085527][T14161] netlink: 'syz.2.2383': attribute type 12 has an invalid length. [ 272.127732][T14168] tipc: Enabled bearer , priority 0 [ 272.165013][T14168] syzkaller0: entered promiscuous mode [ 272.189351][T14168] syzkaller0: entered allmulticast mode [ 272.258740][T14176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2387'. [ 272.269640][T14168] tipc: Resetting bearer [ 272.280691][T14167] tipc: Resetting bearer [ 272.291916][T14167] tipc: Disabling bearer [ 272.395940][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 272.441176][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'. [ 272.790766][T14193] lo speed is unknown, defaulting to 1000 [ 272.916431][ T6797] tipc: Node number set to 134418688 [ 272.970971][T14193] hsr0 speed is unknown, defaulting to 1000 [ 273.042444][T14200] netlink: 'syz.1.2391': attribute type 6 has an invalid length. [ 273.075315][T14204] lo speed is unknown, defaulting to 1000 [ 273.427769][T14204] hsr0 speed is unknown, defaulting to 1000 [ 273.429087][T14217] tipc: Enabling of bearer rejected, already enabled [ 273.442015][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.501961][T14221] batadv_slave_1: entered allmulticast mode [ 273.610823][T14221] dvmrp8: entered allmulticast mode [ 273.691306][T14228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2400'. [ 273.723052][T14230] lo speed is unknown, defaulting to 1000 [ 273.734408][T14210] netlink: 'syz.3.2393': attribute type 6 has an invalid length. [ 273.992931][T14221] lo speed is unknown, defaulting to 1000 [ 274.002841][T14230] hsr0 speed is unknown, defaulting to 1000 [ 274.048655][T14237] tipc: Enabled bearer , priority 0 [ 274.139629][T14237] syzkaller0: entered promiscuous mode [ 274.148529][T14237] syzkaller0: entered allmulticast mode [ 274.195074][T14237] tipc: Resetting bearer [ 274.228181][T14221] hsr0 speed is unknown, defaulting to 1000 [ 274.236895][T14236] tipc: Resetting bearer [ 274.299126][T14236] tipc: Disabling bearer [ 274.369529][T14220] batadv_slave_1: left allmulticast mode [ 274.375861][T14220] dvmrp8: left allmulticast mode [ 274.476047][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.514716][T14255] tipc: Enabled bearer , priority 0 [ 274.534105][T14255] syzkaller0: entered promiscuous mode [ 274.552062][T14255] syzkaller0: entered allmulticast mode [ 274.766644][T14255] tipc: Resetting bearer [ 274.781045][T14254] tipc: Resetting bearer [ 274.804191][T14254] tipc: Disabling bearer [ 274.885625][T14261] tipc: Enabled bearer , priority 0 [ 274.903016][T14263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2411'. [ 274.927154][T14261] syzkaller0: entered promiscuous mode [ 274.932659][T14261] syzkaller0: entered allmulticast mode [ 274.974753][T14260] lo speed is unknown, defaulting to 1000 [ 274.981717][T14261] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 274.992219][T14265] tipc: Enabling of bearer rejected, already enabled [ 275.017803][T14261] tipc: Resetting bearer [ 275.075011][T14258] tipc: Resetting bearer [ 275.086103][ T5858] Bluetooth: hci4: link tx timeout [ 275.091296][ T5858] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 275.123352][T14258] tipc: Disabling bearer [ 275.136630][T14260] hsr0 speed is unknown, defaulting to 1000 [ 275.266278][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2415'. [ 275.450489][T14276] netlink: 'syz.3.2410': attribute type 6 has an invalid length. [ 275.515998][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 275.530859][T14286] tipc: Enabling of bearer rejected, already enabled [ 275.707640][T14303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2422'. [ 276.000584][T14312] tipc: Enabled bearer , priority 0 [ 276.021363][T14310] tipc: Resetting bearer [ 276.031672][T14313] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2423'. [ 276.051309][T14312] syzkaller0: entered promiscuous mode [ 276.059999][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 276.069586][T14312] syzkaller0: entered allmulticast mode [ 276.077993][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 276.097378][T14312] tipc: Resetting bearer [ 276.109674][T14311] tipc: Resetting bearer [ 276.123279][T14311] tipc: Disabling bearer [ 276.177380][T14318] batadv_slave_1: entered allmulticast mode [ 276.191526][T14318] dvmrp8: entered allmulticast mode [ 276.221518][T14320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2427'. [ 276.226740][T14318] lo speed is unknown, defaulting to 1000 [ 276.352544][T14324] batadv1: left allmulticast mode [ 276.358719][T14324] batadv1: left promiscuous mode [ 276.371600][T14324] bridge0: port 1(batadv1) entered disabled state [ 276.462867][T14318] hsr0 speed is unknown, defaulting to 1000 [ 276.572656][T14334] tipc: Enabled bearer , priority 0 [ 276.610970][T14334] syzkaller0: entered promiscuous mode [ 276.617381][T14334] syzkaller0: entered allmulticast mode [ 276.640388][T14327] lo speed is unknown, defaulting to 1000 [ 276.651592][T14334] tipc: Resetting bearer [ 276.677568][T14338] tipc: Enabled bearer , priority 0 [ 276.692385][T14333] tipc: Resetting bearer [ 276.710678][T14333] tipc: Disabling bearer [ 276.735219][T14338] syzkaller0: entered promiscuous mode [ 276.745311][T14338] syzkaller0: entered allmulticast mode [ 276.755238][T14317] batadv_slave_1: left allmulticast mode [ 276.762954][T14317] dvmrp8: left allmulticast mode [ 276.786114][T14327] hsr0 speed is unknown, defaulting to 1000 [ 276.787454][T14338] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 276.887815][T14338] tipc: Resetting bearer [ 276.939663][T14337] tipc: Resetting bearer [ 276.981766][T14337] tipc: Disabling bearer [ 277.001231][T14354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 277.010889][T14354] netlink: 'syz.0.2437': attribute type 7 has an invalid length. [ 277.020103][T14355] tipc: Enabled bearer , priority 0 [ 277.039425][T14356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2435'. [ 277.050076][T14354] netlink: 'syz.0.2437': attribute type 8 has an invalid length. [ 277.060594][T14350] syzkaller0: entered promiscuous mode [ 277.071140][T14350] syzkaller0: entered allmulticast mode [ 277.077337][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2437'. [ 277.116568][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 277.130341][T14354] syz_tun: entered promiscuous mode [ 277.183481][T14354] batadv_slave_1: entered promiscuous mode [ 277.191770][T14354] erspan0: entered promiscuous mode [ 277.199139][T14354] erspan0: left promiscuous mode [ 277.204494][T14354] syz_tun: left promiscuous mode [ 277.217650][T14354] batadv_slave_1: left promiscuous mode [ 277.274087][T14350] tipc: Resetting bearer [ 277.287259][T14349] tipc: Resetting bearer [ 277.317309][T14349] tipc: Disabling bearer [ 277.398773][T14365] tipc: Enabled bearer , priority 0 [ 277.400917][T14369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2442'. [ 277.409356][T14365] syzkaller0: entered promiscuous mode [ 277.421439][T14365] syzkaller0: entered allmulticast mode [ 277.489109][T14365] tipc: Resetting bearer [ 277.502632][T14364] tipc: Resetting bearer [ 277.520923][T14364] tipc: Disabling bearer [ 277.943588][T14383] dvmrp8: entered allmulticast mode [ 277.988637][T14383] lo speed is unknown, defaulting to 1000 [ 278.198433][T14383] hsr0 speed is unknown, defaulting to 1000 [ 278.374538][T14395] bond0: (slave dummy0): Releasing backup interface [ 278.414295][T14381] dvmrp8: left allmulticast mode [ 278.640174][T14407] netlink: 'syz.1.2453': attribute type 10 has an invalid length. [ 278.706197][T14407] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 279.370599][T14424] lo speed is unknown, defaulting to 1000 [ 279.454444][T14429] dvmrp8: entered allmulticast mode [ 279.611022][T14436] tipc: Enabled bearer , priority 0 [ 279.623227][T14436] syzkaller0: entered promiscuous mode [ 279.631603][T14436] syzkaller0: entered allmulticast mode [ 279.651016][T14429] lo speed is unknown, defaulting to 1000 [ 279.697638][T14436] tipc: Resetting bearer [ 279.729671][T14435] tipc: Resetting bearer [ 279.761713][T14435] tipc: Disabling bearer [ 279.773518][T14429] hsr0 speed is unknown, defaulting to 1000 [ 279.792908][T14424] hsr0 speed is unknown, defaulting to 1000 [ 279.792915][T14439] lo speed is unknown, defaulting to 1000 [ 279.938172][T14441] bridge2: port 1(bond2) entered blocking state [ 279.944660][T14441] bridge2: port 1(bond2) entered disabled state [ 279.951631][T14441] bond2: entered allmulticast mode [ 279.960626][T14441] bond2: entered promiscuous mode [ 279.992058][T14428] dvmrp8: left allmulticast mode [ 280.100796][T14439] hsr0 speed is unknown, defaulting to 1000 [ 281.302699][T14482] lo speed is unknown, defaulting to 1000 [ 281.515532][T14482] hsr0 speed is unknown, defaulting to 1000 [ 281.904307][T14504] lo speed is unknown, defaulting to 1000 [ 282.053534][T14504] hsr0 speed is unknown, defaulting to 1000 [ 282.907540][T14533] __nla_validate_parse: 1 callbacks suppressed [ 282.907560][T14533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2483'. [ 282.936841][T14534] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 282.944301][T14534] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 282.963472][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2484'. [ 283.419466][T14546] netlink: 'syz.2.2488': attribute type 1 has an invalid length. [ 283.428022][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 283.442846][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2485'. [ 283.465730][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2485'. [ 283.673599][T14558] lo speed is unknown, defaulting to 1000 [ 283.710049][T14562] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 283.733353][T14565] syzkaller1: entered promiscuous mode [ 283.743512][T14565] syzkaller1: entered allmulticast mode [ 284.005499][T14558] hsr0 speed is unknown, defaulting to 1000 [ 284.005499][T14575] lo speed is unknown, defaulting to 1000 [ 284.063764][T14578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2497'. [ 284.203845][T14575] hsr0 speed is unknown, defaulting to 1000 [ 284.279492][T14568] netlink: 'syz.3.2492': attribute type 6 has an invalid length. [ 284.375597][T14584] lo speed is unknown, defaulting to 1000 [ 284.442947][T14584] hsr0 speed is unknown, defaulting to 1000 [ 284.713127][T14597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2499'. [ 284.888643][T14591] lo speed is unknown, defaulting to 1000 [ 285.186606][T14591] hsr0 speed is unknown, defaulting to 1000 [ 285.315269][T14609] geneve0: entered allmulticast mode [ 285.359241][T14611] lo speed is unknown, defaulting to 1000 [ 285.672847][T14611] hsr0 speed is unknown, defaulting to 1000 [ 285.705101][T14617] lo speed is unknown, defaulting to 1000 [ 285.812339][T14620] netlink: 'syz.3.2508': attribute type 6 has an invalid length. [ 285.968975][T14617] hsr0 speed is unknown, defaulting to 1000 [ 286.348714][T14648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2515'. [ 286.365510][T14648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2515'. [ 286.403510][T14648] ip6gretap0: entered promiscuous mode [ 286.431339][T14648] syz_tun: entered promiscuous mode [ 286.451306][T14648] hsr2: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 286.502189][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 286.521629][T14648] hsr2: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 286.592959][T14654] batadv0: entered promiscuous mode [ 286.600402][T14654] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.609396][T14654] batadv0: left promiscuous mode [ 286.854150][T14670] lo speed is unknown, defaulting to 1000 [ 287.076859][T14670] hsr0 speed is unknown, defaulting to 1000 [ 287.269857][T14685] netlink: 'syz.4.2528': attribute type 1 has an invalid length. [ 287.317679][T14685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.373907][T14685] bond1: (slave geneve3): making interface the new active one [ 287.383339][T14685] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 287.392882][ T5160] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.412443][T14691] netlink: 'syz.3.2529': attribute type 12 has an invalid length. [ 287.442250][ T5160] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.484929][ T5160] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.500750][ T5160] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.880357][T14723] lo speed is unknown, defaulting to 1000 [ 287.985021][T14732] __nla_validate_parse: 8 callbacks suppressed [ 287.985041][T14732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2541'. [ 288.008196][T14723] hsr0 speed is unknown, defaulting to 1000 [ 288.218229][T14723] netlink: 'syz.0.2540': attribute type 6 has an invalid length. [ 288.301389][T14744] tipc: Enabled bearer , priority 0 [ 288.310150][T14744] syzkaller0: entered promiscuous mode [ 288.315753][T14744] syzkaller0: entered allmulticast mode [ 288.334912][T14744] tipc: Resetting bearer [ 288.342589][T14743] tipc: Resetting bearer [ 288.353808][T14743] tipc: Disabling bearer [ 288.419596][T14746] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 290.014085][T14764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2548'. [ 290.136393][T14778] Unsupported ieee802154 address type: 0 [ 290.165312][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 290.263445][T14786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2555'. [ 290.316919][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 290.478232][T14798] lo speed is unknown, defaulting to 1000 [ 290.610410][T14794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2555'. [ 291.103541][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.118576][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.136292][T14810] lo speed is unknown, defaulting to 1000 [ 291.142161][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.176234][T14798] hsr0 speed is unknown, defaulting to 1000 [ 291.198632][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.249976][T14820] netlink: 'syz.0.2562': attribute type 2 has an invalid length. [ 291.270437][T14818] tipc: Enabled bearer , priority 0 [ 291.281562][T14820] k›*·]‘: entered promiscuous mode [ 291.307761][T14818] syzkaller0: entered promiscuous mode [ 291.321604][T14818] syzkaller0: entered allmulticast mode [ 291.341337][T14801] netlink: 'syz.2.2558': attribute type 6 has an invalid length. [ 291.401629][T14820] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.413798][T14820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.449305][T14810] hsr0 speed is unknown, defaulting to 1000 [ 291.470080][T14818] tipc: Resetting bearer [ 291.480163][T14820] veth0_to_team: entered promiscuous mode [ 291.486755][T14820] veth0_to_team: entered allmulticast mode [ 291.788366][T14833] netlink: 'syz.0.2565': attribute type 1 has an invalid length. [ 292.009777][T14815] tipc: Resetting bearer [ 292.019676][T14815] tipc: Disabling bearer [ 292.256255][T14852] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2568'. [ 292.404090][T14857] siw: device registration error -23 [ 292.443411][T14860] tipc: Enabling of bearer rejected, already enabled [ 292.457863][T14860] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 292.465636][T14860] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 292.610544][T14867] lo speed is unknown, defaulting to 1000 [ 292.717779][T14867] hsr0 speed is unknown, defaulting to 1000 [ 292.933967][T14878] syz_tun: entered allmulticast mode [ 292.945488][T14878] dvmrp8: entered allmulticast mode [ 292.967971][T14878] lo speed is unknown, defaulting to 1000 [ 293.015846][T14883] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2577'. [ 293.127336][T14878] hsr0 speed is unknown, defaulting to 1000 [ 293.211036][T14876] syz_tun: left allmulticast mode [ 293.217482][T14876] dvmrp8: left allmulticast mode [ 293.538513][T14899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2580'. [ 293.681337][T14897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.836735][T14901] bond0: (slave 0!): Releasing backup interface [ 293.968192][T14901] bridge_slave_0: left allmulticast mode [ 293.995334][T14901] bridge_slave_0: left promiscuous mode [ 294.004921][T14901] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.032661][T14901] bridge_slave_1: left allmulticast mode [ 294.044961][T14901] bridge_slave_1: left promiscuous mode [ 294.052117][T14901] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.065778][T14901] bond0: (slave bond_slave_0): Releasing backup interface [ 294.079685][T14901] team0: Port device team_slave_0 removed [ 294.090794][T14901] team0: Port device team_slave_1 removed [ 294.098025][T14901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.109383][T14901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.121358][T14901] bond1: (slave geneve3): Releasing active interface [ 294.146550][T14905] batadv_slave_1: entered allmulticast mode [ 294.160553][T14907] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 294.206590][T14908] dvmrp8: entered allmulticast mode [ 294.225115][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.250879][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.277245][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.292382][T14904] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2582'. [ 294.296283][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.328637][T14905] lo speed is unknown, defaulting to 1000 [ 294.709439][T14905] hsr0 speed is unknown, defaulting to 1000 [ 294.840251][T14903] batadv_slave_1: left allmulticast mode [ 294.871457][T14903] dvmrp8: left allmulticast mode [ 295.055298][T14926] netlink: 'syz.3.2587': attribute type 1 has an invalid length. [ 295.086642][T14926] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2587'. [ 295.538782][T14936] lo speed is unknown, defaulting to 1000 [ 295.607993][T14939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2590'. [ 295.730626][T14936] hsr0 speed is unknown, defaulting to 1000 [ 295.870397][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2593'. [ 296.257551][T14964] bond0: (slave wlan1): Releasing backup interface [ 296.267109][T14964] team0: Port device bridge0 removed [ 296.279285][T14964] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2598'. [ 296.289303][T14964] team0: Mode changed to "broadcast" [ 296.298080][T14964] tipc: Enabled bearer , priority 0 [ 296.544138][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'. [ 297.416431][ T10] tipc: Node number set to 1313475996 [ 297.471607][T15002] syzkaller1: entered promiscuous mode [ 297.509459][T15002] syzkaller1: entered allmulticast mode [ 297.744182][T15023] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 297.746171][T15020] IPVS: stopping backup sync thread 15023 ... [ 297.836634][T15020] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2619'. [ 297.856890][T15026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.882424][T15020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2619'. [ 297.901056][T15022] lo speed is unknown, defaulting to 1000 [ 298.070362][T15022] hsr0 speed is unknown, defaulting to 1000 [ 298.790083][T15054] bpq0: entered promiscuous mode [ 298.987342][T15059] lo speed is unknown, defaulting to 1000 [ 299.262704][T15075] __nla_validate_parse: 1 callbacks suppressed [ 299.262724][T15075] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2633'. [ 299.325196][T15059] hsr0 speed is unknown, defaulting to 1000 [ 299.604350][T15088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2637'. [ 300.072144][T15104] lo speed is unknown, defaulting to 1000 [ 300.240479][T15111] syz_tun: entered allmulticast mode [ 300.277396][T15111] dvmrp8: entered allmulticast mode [ 300.318971][T15115] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2645'. [ 300.433960][T15118] netlink: 768 bytes leftover after parsing attributes in process `syz.2.2643'. [ 300.509432][T15104] hsr0 speed is unknown, defaulting to 1000 [ 300.528118][T15109] lo speed is unknown, defaulting to 1000 [ 300.711508][T15126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2649'. [ 300.727811][T15126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2649'. [ 300.741151][T15126] batadv0: entered promiscuous mode [ 300.747671][T15126] team0: entered promiscuous mode [ 300.754752][T15126] debugfs: 'hsr1' already exists in 'hsr' [ 300.761416][T15126] Cannot create hsr debugfs directory [ 300.767839][T15126] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 300.778851][T15126] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 300.796898][T15111] lo speed is unknown, defaulting to 1000 [ 300.799147][T15109] hsr0 speed is unknown, defaulting to 1000 [ 300.911410][T15111] hsr0 speed is unknown, defaulting to 1000 [ 300.965591][T15104] netlink: 'syz.1.2644': attribute type 6 has an invalid length. [ 300.981884][T15110] syz_tun: left allmulticast mode [ 300.987151][T15110] dvmrp8: left allmulticast mode [ 301.326307][T15150] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 301.336839][T15149] IPVS: stopping backup sync thread 15150 ... [ 301.597187][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 301.730830][T15163] lo speed is unknown, defaulting to 1000 [ 301.849425][T15163] hsr0 speed is unknown, defaulting to 1000 [ 302.291828][T15182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2663'. [ 302.601503][T15186] lo speed is unknown, defaulting to 1000 [ 302.803674][T15192] lo speed is unknown, defaulting to 1000 [ 302.955225][T15192] hsr0 speed is unknown, defaulting to 1000 [ 302.966815][T15186] hsr0 speed is unknown, defaulting to 1000 [ 303.075227][T15203] netlink: 'syz.2.2664': attribute type 6 has an invalid length. [ 303.363841][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2671'. [ 303.550766][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'. [ 303.560790][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'. [ 303.570039][T15233] batman_adv: batadv0: Adding interface: ip6gretap1 [ 303.586303][T15233] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 303.618428][T15233] batman_adv: batadv0: Interface activated: ip6gretap1 [ 304.690264][T15253] __nla_validate_parse: 3 callbacks suppressed [ 304.690292][T15253] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2677'. [ 304.764848][T15257] lo speed is unknown, defaulting to 1000 [ 304.787340][T15256] syz_tun: entered allmulticast mode [ 304.863245][T15256] dvmrp8: entered allmulticast mode [ 304.981311][T15259] netlink: 768 bytes leftover after parsing attributes in process `syz.2.2679'. [ 305.085387][T15257] hsr0 speed is unknown, defaulting to 1000 [ 305.091657][T15256] lo speed is unknown, defaulting to 1000 [ 305.535411][T15256] hsr0 speed is unknown, defaulting to 1000 [ 305.577414][T15283] lo speed is unknown, defaulting to 1000 [ 305.668062][T15255] syz_tun: left allmulticast mode [ 305.696740][T15255] dvmrp8: left allmulticast mode [ 305.921376][T15283] hsr0 speed is unknown, defaulting to 1000 [ 305.968535][T15298] lo speed is unknown, defaulting to 1000 [ 306.227366][T15298] hsr0 speed is unknown, defaulting to 1000 [ 306.608583][T15318] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 306.719687][T15321] bpq0: left promiscuous mode [ 306.897525][T15298] netlink: 'syz.3.2688': attribute type 6 has an invalid length. [ 307.341950][T15341] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 307.372542][T15336] lo speed is unknown, defaulting to 1000 [ 307.414270][T15346] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2698'. [ 307.482964][T15345] veth0_to_team: left promiscuous mode [ 307.505935][T15345] veth0_to_team: left allmulticast mode [ 307.537832][T15345] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 307.561713][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2697'. [ 307.597604][T15345] geneve2: left promiscuous mode [ 307.609910][T15345] geneve2: left allmulticast mode [ 307.617416][T15345] veth3: left promiscuous mode [ 307.623209][T15345] macvtap1: left promiscuous mode [ 307.629858][T15345] macvtap1: left allmulticast mode [ 307.643863][T15345] hsr1: left promiscuous mode [ 307.653564][T15345] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 307.661698][T15345] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 307.680106][T15336] hsr0 speed is unknown, defaulting to 1000 [ 307.697703][T15351] hsr_slave_0: left promiscuous mode [ 307.704975][T15351] hsr_slave_1: left promiscuous mode [ 307.924003][T15356] lo speed is unknown, defaulting to 1000 [ 308.225558][T15362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2702'. [ 308.234912][T15356] hsr0 speed is unknown, defaulting to 1000 [ 308.633682][T15373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.389287][T15387] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 309.445495][T15386] lo speed is unknown, defaulting to 1000 [ 309.513762][T15392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2710'. [ 309.700269][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2713'. [ 309.712463][T15386] hsr0 speed is unknown, defaulting to 1000 [ 309.712465][T15390] lo speed is unknown, defaulting to 1000 [ 309.803016][T15390] hsr0 speed is unknown, defaulting to 1000 [ 309.948560][T15406] lo speed is unknown, defaulting to 1000 [ 310.092838][T15406] hsr0 speed is unknown, defaulting to 1000 [ 310.260383][T15417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.272305][T15417] bond0: (slave rose0): Enslaving as an active interface with an up link [ 310.349427][T15386] netlink: 'syz.3.2709': attribute type 6 has an invalid length. [ 310.530682][T15432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2719'. [ 310.651780][T15440] batman_adv: batadv0: Adding interface: dummy0 [ 310.687545][T15440] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.724651][T15439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2720'. [ 310.735581][T15445] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2721'. [ 310.754642][T15440] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 310.885993][T15432] batman_adv: batadv0: Adding interface: ip6gretap2 [ 310.892726][T15432] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.999401][T15432] batman_adv: batadv0: Interface activated: ip6gretap2 [ 311.073008][T15454] tipc: Enabled bearer , priority 0 [ 311.447993][ T51] Bluetooth: hci0: command tx timeout [ 311.522059][T15471] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2724'. [ 311.829662][T15473] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 311.878823][T15473] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2726'. [ 311.977071][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2726'. [ 312.043206][T15479] lo speed is unknown, defaulting to 1000 [ 312.216039][ T10] tipc: Node number set to 3114932290 [ 312.273859][T15495] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 312.298501][T15453] tipc: Disabling bearer [ 312.319379][T15479] hsr0 speed is unknown, defaulting to 1000 [ 312.364542][T15491] lo speed is unknown, defaulting to 1000 [ 312.468914][T15500] IPVS: rr: FWM 3 0x00000003 - no destination available [ 312.836735][T15491] hsr0 speed is unknown, defaulting to 1000 [ 312.861759][T15514] lo speed is unknown, defaulting to 1000 [ 313.662092][T15514] hsr0 speed is unknown, defaulting to 1000 [ 313.719413][T15540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2737'. [ 313.916493][T15526] netlink: 'syz.2.2733': attribute type 6 has an invalid length. [ 314.010037][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2740'. [ 314.326962][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 314.413905][T15560] lo speed is unknown, defaulting to 1000 [ 314.579271][T15560] hsr0 speed is unknown, defaulting to 1000 [ 314.644789][T15564] lo speed is unknown, defaulting to 1000 [ 315.014527][T15586] __nla_validate_parse: 1 callbacks suppressed [ 315.014546][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 315.051408][T15564] hsr0 speed is unknown, defaulting to 1000 [ 315.361323][T15595] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2752'. [ 315.445385][T15595] batadv1: entered promiscuous mode [ 315.471643][T15595] batadv1: entered allmulticast mode [ 315.538623][T15604] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 315.604808][T15604] netlink: 'syz.2.2756': attribute type 4 has an invalid length. [ 315.805657][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2754'. [ 315.889204][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2760'. [ 316.022495][T15637] lo speed is unknown, defaulting to 1000 [ 316.232354][T15637] hsr0 speed is unknown, defaulting to 1000 [ 316.299453][T15641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2762'. [ 316.888541][T15665] lo speed is unknown, defaulting to 1000 [ 316.998298][T15665] hsr0 speed is unknown, defaulting to 1000 [ 317.460118][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2773'. [ 317.688045][T15690] syzkaller1: entered allmulticast mode [ 317.888174][T15701] netlink: 'syz.3.2778': attribute type 1 has an invalid length. [ 317.897758][T15701] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2778'. [ 317.978941][T15698] lo speed is unknown, defaulting to 1000 [ 318.276715][T15716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2781'. [ 318.327992][T15718] netlink: 'syz.2.2779': attribute type 1 has an invalid length. [ 318.340720][T15718] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2779'. [ 318.400061][T15720] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 318.401615][T15698] hsr0 speed is unknown, defaulting to 1000 [ 318.666868][T15720] nbd0: detected capacity change from 0 to 127 [ 318.683965][ T5858] block nbd0: Receive control failed (result -32) [ 318.759987][T15726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2784'. [ 319.052664][T15738] ip6erspan0: entered promiscuous mode [ 320.025526][T15790] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 320.044497][T15790] __nla_validate_parse: 8 callbacks suppressed [ 320.044518][T15790] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2801'. [ 320.155572][T15794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2804'. [ 320.829320][T15810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2810'. [ 320.863097][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2809'. [ 321.003484][T15824] lo speed is unknown, defaulting to 1000 [ 321.069926][T15824] hsr0 speed is unknown, defaulting to 1000 [ 321.272808][T15839] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 321.280092][T15839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2820'. [ 321.289972][T15839] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 321.344958][T15844] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2822'. [ 321.574006][T15859] lo speed is unknown, defaulting to 1000 [ 321.580124][T15859] lo speed is unknown, defaulting to 1000 [ 321.590614][T15859] lo speed is unknown, defaulting to 1000 [ 321.602763][T15859] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 321.622971][T15859] lo speed is unknown, defaulting to 1000 [ 321.630566][T15859] lo speed is unknown, defaulting to 1000 [ 321.638018][T15859] lo speed is unknown, defaulting to 1000 [ 321.649157][T15859] lo speed is unknown, defaulting to 1000 [ 321.657448][T15859] lo speed is unknown, defaulting to 1000 [ 321.739893][T15863] lo speed is unknown, defaulting to 1000 [ 322.144837][T15863] hsr0 speed is unknown, defaulting to 1000 [ 322.191963][T15863] lo speed is unknown, defaulting to 1000 [ 322.242029][T15878] netlink: 'syz.2.2832': attribute type 16 has an invalid length. [ 322.301095][T15878] netlink: 'syz.2.2832': attribute type 17 has an invalid length. [ 322.386663][T15878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.394952][T15878] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.403315][T15878] tipc: Resetting bearer [ 322.416709][T15878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.572601][T15863] netlink: 'syz.0.2829': attribute type 6 has an invalid length. [ 323.292676][T15926] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 323.302216][T15926] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 323.425603][T15924] lo speed is unknown, defaulting to 1000 [ 323.493716][T15940] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 323.613547][T15940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.635242][T15945] bond3: (slave wlan0): Opening slave failed [ 323.675531][T15924] hsr0 speed is unknown, defaulting to 1000 [ 323.683883][T15924] lo speed is unknown, defaulting to 1000 [ 323.794586][T15926] vlan2: entered allmulticast mode [ 323.801087][T15926] veth1: entered allmulticast mode [ 323.807768][T15926] bond3: (slave vlan2): Opening slave failed [ 324.102335][T15978] lo speed is unknown, defaulting to 1000 [ 324.113450][T15977] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2855'. [ 324.404809][T15978] hsr0 speed is unknown, defaulting to 1000 [ 324.434411][T15978] lo speed is unknown, defaulting to 1000 [ 324.814563][T16007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2864'. [ 325.135600][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2871'. [ 325.175108][T16022] netlink: 'syz.1.2870': attribute type 5 has an invalid length. [ 325.245718][ T1089] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.275839][ T1089] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.294777][ T1089] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.307044][ T1089] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.346837][ T1089] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.370936][ T1089] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.415423][ T1089] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.449941][ T1089] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.562894][T16040] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 325.599437][T16031] lo speed is unknown, defaulting to 1000 [ 325.721676][T16030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2874'. [ 325.758633][T16031] hsr0 speed is unknown, defaulting to 1000 [ 325.855287][T16031] lo speed is unknown, defaulting to 1000 [ 326.093604][T16067] netlink: 'syz.1.2884': attribute type 1 has an invalid length. [ 326.414600][T16088] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 326.435028][T16088] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 326.705771][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2899'. [ 326.852322][T16117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2901'. [ 326.881250][T16120] lo speed is unknown, defaulting to 1000 [ 327.100833][T16120] hsr0 speed is unknown, defaulting to 1000 [ 327.121062][T16120] lo speed is unknown, defaulting to 1000 [ 327.397163][T16141] lo speed is unknown, defaulting to 1000 [ 327.577326][T16141] hsr0 speed is unknown, defaulting to 1000 [ 327.584215][T16141] lo speed is unknown, defaulting to 1000 [ 328.380946][T16188] syzkaller1: entered promiscuous mode [ 328.415726][T16188] syzkaller1: entered allmulticast mode [ 329.051133][T16235] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2952'. [ 329.068047][T16235] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2952'. [ 329.119727][T16237] lo speed is unknown, defaulting to 1000 [ 329.306161][T16237] hsr0 speed is unknown, defaulting to 1000 [ 329.319760][T16237] lo speed is unknown, defaulting to 1000 [ 329.379779][T16252] netlink: 'syz.3.2959': attribute type 6 has an invalid length. [ 329.694365][T16237] netlink: 'syz.4.2953': attribute type 6 has an invalid length. [ 329.807888][T16270] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2960'. [ 329.959679][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2960'. [ 330.668410][T16326] lo speed is unknown, defaulting to 1000 [ 330.721979][T16335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2993'. [ 330.740125][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2994'. [ 331.219470][T16326] hsr0 speed is unknown, defaulting to 1000 [ 331.251583][T16326] lo speed is unknown, defaulting to 1000 [ 331.436933][T16326] netlink: 'syz.3.2988': attribute type 6 has an invalid length. [ 331.457231][T16388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3010'. [ 331.765663][T16400] lo speed is unknown, defaulting to 1000 [ 332.060558][T16400] hsr0 speed is unknown, defaulting to 1000 [ 332.068981][T16400] lo speed is unknown, defaulting to 1000 [ 332.150156][T16422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3024'. [ 332.325654][T16430] lo speed is unknown, defaulting to 1000 [ 332.342426][T16432] netlink: 'syz.0.3030': attribute type 25 has an invalid length. [ 332.553078][T16430] hsr0 speed is unknown, defaulting to 1000 [ 332.571089][T16430] lo speed is unknown, defaulting to 1000 [ 332.853139][T16430] netlink: 'syz.3.3029': attribute type 6 has an invalid length. [ 333.134104][T16466] lo speed is unknown, defaulting to 1000 [ 333.239715][T16466] hsr0 speed is unknown, defaulting to 1000 [ 333.247023][T16466] lo speed is unknown, defaulting to 1000 [ 334.219624][T16503] netlink: 5636 bytes leftover after parsing attributes in process `syz.4.3055'. [ 334.259129][T16505] lo speed is unknown, defaulting to 1000 [ 334.323763][T16505] hsr0 speed is unknown, defaulting to 1000 [ 334.332692][T16505] lo speed is unknown, defaulting to 1000 [ 334.591415][T16522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3057'. [ 334.626495][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'. [ 334.756505][T16505] netlink: 'syz.4.3056': attribute type 6 has an invalid length. [ 334.832125][T16522] syz_tun (unregistering): left allmulticast mode [ 334.852093][T16521] netlink: 'syz.3.3059': attribute type 6 has an invalid length. [ 334.907155][T16522] syz_tun (unregistering): left promiscuous mode [ 335.671225][T16563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3072'. [ 335.911845][T16576] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 335.923952][T16576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3076'. [ 335.935064][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'. [ 336.451895][T16607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3086'. [ 337.227157][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 337.880612][T16690] lo speed is unknown, defaulting to 1000 [ 337.965556][T16690] hsr0 speed is unknown, defaulting to 1000 [ 337.973425][T16690] lo speed is unknown, defaulting to 1000 [ 338.283836][T16690] netlink: 'syz.3.3117': attribute type 6 has an invalid length. [ 338.557813][T16719] lo speed is unknown, defaulting to 1000 [ 338.682232][T16719] hsr0 speed is unknown, defaulting to 1000 [ 338.737412][T16719] lo speed is unknown, defaulting to 1000 [ 339.086456][T16719] netlink: 'syz.1.3125': attribute type 6 has an invalid length. [ 339.651592][T16781] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3141'. [ 339.682949][T16778] lo speed is unknown, defaulting to 1000 [ 339.735914][T16784] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3145'. [ 339.888571][T16778] hsr0 speed is unknown, defaulting to 1000 [ 339.906481][T16778] lo speed is unknown, defaulting to 1000 [ 340.218671][T16805] lo speed is unknown, defaulting to 1000 [ 340.256032][T16778] netlink: 'syz.2.3143': attribute type 6 has an invalid length. [ 340.411044][T16805] hsr0 speed is unknown, defaulting to 1000 [ 340.416403][T16803] lo speed is unknown, defaulting to 1000 [ 340.576841][T16805] lo speed is unknown, defaulting to 1000 [ 340.595719][T16803] hsr0 speed is unknown, defaulting to 1000 [ 340.720307][T16803] lo speed is unknown, defaulting to 1000 [ 341.019993][T16812] netlink: 'syz.1.3152': attribute type 6 has an invalid length. [ 341.199822][T16840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3160'. [ 341.642401][T16867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3173'. [ 341.705408][T16871] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 341.890853][T16881] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3178'. [ 342.478099][T16909] lo speed is unknown, defaulting to 1000 [ 342.584551][T16909] hsr0 speed is unknown, defaulting to 1000 [ 342.591997][T16909] lo speed is unknown, defaulting to 1000 [ 342.708544][T16922] lo speed is unknown, defaulting to 1000 [ 342.826336][T16909] netlink: 'syz.1.3190': attribute type 6 has an invalid length. [ 342.910685][T16922] hsr0 speed is unknown, defaulting to 1000 [ 342.912302][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c13c00: rx timeout, send abort [ 342.917812][T16922] lo speed is unknown, defaulting to 1000 [ 343.424985][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c13c00: abort rx timeout. Force session deactivation [ 343.575531][T16955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3202'. [ 343.757345][T16965] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3206'. [ 344.030220][T16983] lo speed is unknown, defaulting to 1000 [ 344.292870][T16983] hsr0 speed is unknown, defaulting to 1000 [ 344.329049][T16983] lo speed is unknown, defaulting to 1000 [ 344.385518][T16986] netlink: 'syz.3.3209': attribute type 6 has an invalid length. [ 344.504090][T16995] lo speed is unknown, defaulting to 1000 [ 344.576578][T16995] hsr0 speed is unknown, defaulting to 1000 [ 344.583102][T16995] lo speed is unknown, defaulting to 1000 [ 344.649177][T16983] netlink: 'syz.1.3213': attribute type 6 has an invalid length. [ 345.094482][T17012] lo speed is unknown, defaulting to 1000 [ 345.456664][T17014] lo speed is unknown, defaulting to 1000 [ 345.524151][T17015] netlink: 'syz.0.3222': attribute type 2 has an invalid length. [ 345.570329][T17012] hsr0 speed is unknown, defaulting to 1000 [ 345.591005][T17041] lo speed is unknown, defaulting to 1000 [ 345.615479][T17027] netlink: 'syz.2.3223': attribute type 6 has an invalid length. [ 345.724511][T17041] hsr0 speed is unknown, defaulting to 1000 [ 345.731508][T17041] lo speed is unknown, defaulting to 1000 [ 345.742984][T17012] lo speed is unknown, defaulting to 1000 [ 345.754691][T17014] hsr0 speed is unknown, defaulting to 1000 [ 345.844048][T17014] lo speed is unknown, defaulting to 1000 [ 345.996788][T17060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3235'. [ 346.299750][T17059] netlink: 'syz.4.3234': attribute type 6 has an invalid length. [ 346.366349][T17069] netlink: 'syz.1.3239': attribute type 11 has an invalid length. [ 346.689940][T17085] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3243'. [ 346.929394][T17101] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3248'. [ 347.220647][T17120] lo speed is unknown, defaulting to 1000 [ 347.621676][T17120] hsr0 speed is unknown, defaulting to 1000 [ 347.621730][T17146] lo speed is unknown, defaulting to 1000 [ 347.650198][T17120] lo speed is unknown, defaulting to 1000 [ 347.835584][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'. [ 347.865223][T17146] hsr0 speed is unknown, defaulting to 1000 [ 347.873113][T17146] lo speed is unknown, defaulting to 1000 [ 347.931322][T17120] netlink: 'syz.2.3258': attribute type 6 has an invalid length. [ 348.003114][T17158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3268'. [ 348.210407][T17173] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 348.219139][T17173] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3274'. [ 348.280165][T17179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3277'. [ 348.657338][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3282'. [ 348.819780][T17201] lo speed is unknown, defaulting to 1000 [ 349.012028][T17201] hsr0 speed is unknown, defaulting to 1000 [ 349.032416][T17201] lo speed is unknown, defaulting to 1000 [ 349.043190][T17204] lo speed is unknown, defaulting to 1000 [ 349.520328][T17220] batadv_slave_1: entered allmulticast mode [ 349.541842][T17204] hsr0 speed is unknown, defaulting to 1000 [ 349.553212][T17214] batadv_slave_1: left allmulticast mode [ 349.559802][T17204] lo speed is unknown, defaulting to 1000 [ 349.811332][T17250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3296'. [ 350.131736][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3304'. [ 350.176858][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3304'. [ 350.364275][T17277] lo speed is unknown, defaulting to 1000 [ 350.457500][T17269] netlink: 'syz.2.3301': attribute type 6 has an invalid length. [ 350.538909][T17277] hsr0 speed is unknown, defaulting to 1000 [ 350.562137][T17277] lo speed is unknown, defaulting to 1000 [ 350.879380][T17277] netlink: 'syz.3.3308': attribute type 6 has an invalid length. [ 351.125492][T17294] lo speed is unknown, defaulting to 1000 [ 351.275307][T17294] hsr0 speed is unknown, defaulting to 1000 [ 351.275314][T17297] lo speed is unknown, defaulting to 1000 [ 351.288205][T17294] lo speed is unknown, defaulting to 1000 [ 351.455573][T17297] hsr0 speed is unknown, defaulting to 1000 [ 351.464470][T17297] lo speed is unknown, defaulting to 1000 [ 351.706560][T17297] netlink: 'syz.2.3312': attribute type 6 has an invalid length. [ 352.353577][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 352.591620][T17339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3325'. [ 352.616233][T17348] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3327'. [ 352.723032][T17352] lo speed is unknown, defaulting to 1000 [ 352.755734][T17355] syzkaller1: entered promiscuous mode [ 352.785001][T17355] syzkaller1: entered allmulticast mode [ 353.115518][T17352] hsr0 speed is unknown, defaulting to 1000 [ 353.115520][T17363] lo speed is unknown, defaulting to 1000 [ 353.116598][T17352] lo speed is unknown, defaulting to 1000 [ 353.207985][T17363] hsr0 speed is unknown, defaulting to 1000 [ 353.216019][T17363] lo speed is unknown, defaulting to 1000 [ 354.221360][T17418] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3345'. [ 354.584239][T17442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3352'. [ 354.670929][T17446] syzkaller1: entered promiscuous mode [ 354.676580][T17446] syzkaller1: entered allmulticast mode [ 354.793472][T17454] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 354.809267][T17454] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 354.824923][T17457] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 355.230230][T17475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3365'. [ 355.766597][T17489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3370'. [ 355.884945][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3372'. [ 356.030400][T17496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3373'. [ 356.101398][T17501] lo speed is unknown, defaulting to 1000 [ 356.145499][T17495] clip:clip_setentry: non-CLIP VCC [ 356.394405][T17515] lo speed is unknown, defaulting to 1000 [ 356.394507][T17501] hsr0 speed is unknown, defaulting to 1000 [ 356.437883][T17501] lo speed is unknown, defaulting to 1000 [ 356.823616][T17518] lo speed is unknown, defaulting to 1000 [ 356.914487][T17523] netlink: 'syz.4.3382': attribute type 6 has an invalid length. [ 357.040369][T17518] hsr0 speed is unknown, defaulting to 1000 [ 357.050788][T17515] hsr0 speed is unknown, defaulting to 1000 [ 357.060794][T17518] lo speed is unknown, defaulting to 1000 [ 357.094895][T17515] lo speed is unknown, defaulting to 1000 [ 357.485630][T17542] netlink: 'syz.2.3386': attribute type 7 has an invalid length. [ 357.493911][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 357.735320][T17554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3391'. [ 357.971221][T17568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3395'. [ 358.059915][T17573] lo speed is unknown, defaulting to 1000 [ 358.195060][T17577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.281710][T17573] hsr0 speed is unknown, defaulting to 1000 [ 358.344077][T17573] lo speed is unknown, defaulting to 1000 [ 358.636806][T17573] netlink: 'syz.3.3397': attribute type 6 has an invalid length. [ 358.719808][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'. [ 358.763827][T17600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3401'. [ 358.799205][T17599] lo speed is unknown, defaulting to 1000 [ 358.817180][T17602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3404'. [ 358.941466][T17599] hsr0 speed is unknown, defaulting to 1000 [ 359.009151][T17599] lo speed is unknown, defaulting to 1000 [ 359.044029][T17605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3405'. [ 359.314009][T17620] lo speed is unknown, defaulting to 1000 [ 359.408351][T17599] netlink: 'syz.2.3403': attribute type 6 has an invalid length. [ 359.580647][T17620] hsr0 speed is unknown, defaulting to 1000 [ 359.589524][T17620] lo speed is unknown, defaulting to 1000 [ 359.983853][T17639] veth0_vlan: left promiscuous mode [ 360.006391][T17639] veth0_vlan: entered promiscuous mode [ 360.045000][T17647] lo speed is unknown, defaulting to 1000 [ 360.379251][T17647] hsr0 speed is unknown, defaulting to 1000 [ 360.379352][T17648] lo speed is unknown, defaulting to 1000 [ 360.399165][T17647] lo speed is unknown, defaulting to 1000 [ 360.781052][T17648] hsr0 speed is unknown, defaulting to 1000 [ 360.833431][T17648] lo speed is unknown, defaulting to 1000 [ 360.856686][T17660] netlink: 'syz.3.3418': attribute type 6 has an invalid length. [ 360.964656][T17647] netlink: 'syz.0.3416': attribute type 6 has an invalid length. [ 361.238551][T17681] tipc: Enabled bearer , priority 0 [ 361.281158][T17682] tipc: Enabled bearer , priority 0 [ 361.289741][T17681] syzkaller0: entered promiscuous mode [ 361.299367][T17681] syzkaller0: entered allmulticast mode [ 361.331228][T17682] syzkaller0: entered promiscuous mode [ 361.337612][T17682] syzkaller0: entered allmulticast mode [ 361.349736][T17682] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 361.364482][T17682] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 361.389570][T17681] tipc: Resetting bearer [ 361.397624][T17682] tipc: Resetting bearer [ 361.418552][T17679] tipc: Resetting bearer [ 361.442782][T17679] tipc: Disabling bearer [ 361.479389][T17680] tipc: Resetting bearer [ 361.510523][T17680] tipc: Disabling bearer [ 361.552017][T17694] lo speed is unknown, defaulting to 1000 [ 361.645660][T17696] lo speed is unknown, defaulting to 1000 [ 361.645660][T17694] hsr0 speed is unknown, defaulting to 1000 [ 361.658395][T17694] lo speed is unknown, defaulting to 1000 [ 361.728477][T17699] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3429'. [ 362.149798][T17696] hsr0 speed is unknown, defaulting to 1000 [ 362.283655][T17696] lo speed is unknown, defaulting to 1000 [ 362.353860][T17719] tipc: Resetting bearer [ 362.374757][T17719] team0: Mode changed to "loadbalance" [ 364.223054][T17780] lo speed is unknown, defaulting to 1000 [ 364.349870][T17780] hsr0 speed is unknown, defaulting to 1000 [ 364.357009][T17780] lo speed is unknown, defaulting to 1000 [ 364.533301][T17795] lo speed is unknown, defaulting to 1000 [ 364.606151][T17795] hsr0 speed is unknown, defaulting to 1000 [ 364.612869][T17795] lo speed is unknown, defaulting to 1000 [ 364.625239][T17799] lo speed is unknown, defaulting to 1000 [ 364.697552][T17799] hsr0 speed is unknown, defaulting to 1000 [ 364.704615][T17799] lo speed is unknown, defaulting to 1000 [ 364.958016][T17799] netlink: 'syz.1.3458': attribute type 6 has an invalid length. [ 365.381550][T17816] tipc: Enabled bearer , priority 0 [ 365.389411][T17816] syzkaller0: entered promiscuous mode [ 365.395054][T17816] syzkaller0: entered allmulticast mode [ 365.425407][T17816] tipc: Resetting bearer [ 365.434282][T17814] tipc: Resetting bearer [ 365.472609][T17814] tipc: Disabling bearer [ 365.507957][T17822] lo speed is unknown, defaulting to 1000 [ 365.726625][T17831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3465'. [ 365.742052][T17822] hsr0 speed is unknown, defaulting to 1000 [ 365.827332][T17822] lo speed is unknown, defaulting to 1000 [ 366.469880][T17852] vlan0: entered promiscuous mode [ 366.488192][T17852] batadv0: entered promiscuous mode [ 366.699963][T17857] lo speed is unknown, defaulting to 1000 [ 366.917788][T17874] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3475'. [ 367.186211][T17872] lo speed is unknown, defaulting to 1000 [ 367.193850][T17885] tipc: Enabled bearer , priority 0 [ 367.202219][T17885] syzkaller0: entered promiscuous mode [ 367.212271][T17885] syzkaller0: entered allmulticast mode [ 367.258992][T17857] hsr0 speed is unknown, defaulting to 1000 [ 367.316498][T17872] hsr0 speed is unknown, defaulting to 1000 [ 367.322941][T17881] tipc: Resetting bearer [ 367.332026][T17880] tipc: Resetting bearer [ 367.349353][T17880] tipc: Disabling bearer [ 367.358300][T17857] lo speed is unknown, defaulting to 1000 [ 367.364167][T17875] lo speed is unknown, defaulting to 1000 [ 367.374848][T17872] lo speed is unknown, defaulting to 1000 [ 367.445479][T17883] netlink: 'syz.2.3476': attribute type 6 has an invalid length. [ 367.659260][T17875] hsr0 speed is unknown, defaulting to 1000 [ 367.673943][T17875] lo speed is unknown, defaulting to 1000 [ 367.771373][T17884] netlink: 'syz.0.3477': attribute type 6 has an invalid length. [ 367.839734][T17893] lo speed is unknown, defaulting to 1000 [ 368.326268][T17917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3485'. [ 368.371928][T17893] hsr0 speed is unknown, defaulting to 1000 [ 368.401542][T17912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3484'. [ 368.416708][T17893] lo speed is unknown, defaulting to 1000 [ 368.433907][T17898] netlink: 'syz.4.3480': attribute type 6 has an invalid length. [ 369.202984][T17938] tipc: Resetting bearer [ 369.331944][T17943] lo speed is unknown, defaulting to 1000 [ 369.682607][T17943] hsr0 speed is unknown, defaulting to 1000 [ 369.682634][T17945] lo speed is unknown, defaulting to 1000 [ 369.729988][T17943] lo speed is unknown, defaulting to 1000 [ 369.896641][T17945] hsr0 speed is unknown, defaulting to 1000 [ 369.912294][T17945] lo speed is unknown, defaulting to 1000 [ 369.940694][T17951] netlink: 'syz.4.3492': attribute type 6 has an invalid length. [ 370.161753][T17967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3496'. [ 370.531073][T17973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3498'. [ 370.623311][T17976] vlan2: entered promiscuous mode [ 370.639157][T17976] vlan2: entered allmulticast mode [ 370.644306][T17976] hsr_slave_1: entered allmulticast mode [ 370.681749][T17980] bridge2: port 1(veth5) entered blocking state [ 370.688719][T17980] bridge2: port 1(veth5) entered disabled state [ 370.695317][T17980] veth5: entered allmulticast mode [ 370.704548][T17980] veth5: entered promiscuous mode [ 370.721069][T17976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 370.732481][T17987] lo speed is unknown, defaulting to 1000 [ 370.740967][T17973] bridge2: port 2(veth0_to_bond) entered blocking state [ 370.751115][T17973] bridge2: port 2(veth0_to_bond) entered disabled state [ 370.759440][T17973] veth0_to_bond: entered allmulticast mode [ 370.769048][T17973] veth0_to_bond: entered promiscuous mode [ 370.882745][T17988] lo speed is unknown, defaulting to 1000 [ 370.889770][T17980] vlan2: entered allmulticast mode [ 370.906279][T17980] veth1: entered allmulticast mode [ 370.911964][T17980] bridge2: port 3(vlan2) entered blocking state [ 370.926040][T17980] bridge2: port 3(vlan2) entered disabled state [ 370.938800][T17980] vlan2: entered promiscuous mode [ 370.964256][T17980] veth1: entered promiscuous mode [ 370.993239][T17987] hsr0 speed is unknown, defaulting to 1000 [ 371.021004][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3504'. [ 371.046885][T17987] lo speed is unknown, defaulting to 1000 [ 371.130339][T17999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.168054][T18001] tipc: Enabling of bearer rejected, already enabled [ 371.193322][T17999] bond4: (slave batadv1): Opening slave failed [ 371.265466][T17988] hsr0 speed is unknown, defaulting to 1000 [ 371.329836][T17992] netlink: 'syz.0.3502': attribute type 6 has an invalid length. [ 371.362040][T17988] lo speed is unknown, defaulting to 1000 [ 371.680147][T18018] batman_adv: batadv0: Adding interface: ip6gretap1 [ 371.694700][T18018] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.753515][T18018] batman_adv: batadv0: Interface activated: ip6gretap1 [ 371.982101][T18026] lo speed is unknown, defaulting to 1000 [ 372.122083][T18026] hsr0 speed is unknown, defaulting to 1000 [ 372.132497][T18026] lo speed is unknown, defaulting to 1000 [ 372.479264][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3512'. [ 372.534395][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3512'. [ 372.642869][T18053] lo speed is unknown, defaulting to 1000 [ 372.686613][T18026] netlink: 'syz.0.3509': attribute type 6 has an invalid length. [ 373.238882][T18053] hsr0 speed is unknown, defaulting to 1000 [ 373.246133][T18053] lo speed is unknown, defaulting to 1000 [ 373.373300][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3517'. [ 373.383199][T18071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3517'. [ 373.430059][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3517'. [ 373.515668][T18071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3517'. [ 373.578772][T18071] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3517'. [ 373.607139][T18066] netlink: 'syz.1.3517': attribute type 16 has an invalid length. [ 373.615217][T18066] netlink: 'syz.1.3517': attribute type 17 has an invalid length. [ 373.687043][T18071] IPv6: NLM_F_REPLACE set, but no existing node found! [ 373.755399][T18066] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 373.832716][T18076] lo speed is unknown, defaulting to 1000 [ 373.993586][T18076] hsr0 speed is unknown, defaulting to 1000 [ 374.015235][T18076] lo speed is unknown, defaulting to 1000 [ 374.509011][T18091] lo speed is unknown, defaulting to 1000 [ 375.089552][T18107] lo speed is unknown, defaulting to 1000 [ 375.096985][T18091] hsr0 speed is unknown, defaulting to 1000 [ 375.107776][T18091] lo speed is unknown, defaulting to 1000 [ 375.249556][T18118] bridge_slave_0: left allmulticast mode [ 375.255250][T18118] bridge_slave_0: left promiscuous mode [ 375.292292][T18118] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.307963][T18118] bridge_slave_1: left allmulticast mode [ 375.391737][T18118] bridge_slave_1: left promiscuous mode [ 375.498563][T18118] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.588635][T18118] team0: Port device team_slave_0 removed [ 375.601975][T18114] netlink: 'syz.0.3528': attribute type 10 has an invalid length. [ 375.614503][T18118] team0: Port device team_slave_1 removed [ 375.621417][T18118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.630924][T18118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.640868][T18118] vlan2: left allmulticast mode [ 375.646551][T18118] bridge0: left allmulticast mode [ 375.672894][T18118] vlan2: left promiscuous mode [ 375.718081][T18118] bridge0: left promiscuous mode [ 375.731415][T18118] bridge1: port 1(vlan2) entered disabled state [ 375.816694][T18119] netlink: 'syz.4.3527': attribute type 6 has an invalid length. [ 375.858622][T18118] team0: Port device bond0 removed [ 375.865634][T18118] bond1: (slave veth3): Releasing active interface [ 375.914768][T18107] hsr0 speed is unknown, defaulting to 1000 [ 376.018893][T18107] lo speed is unknown, defaulting to 1000 [ 376.041816][T18142] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 376.058332][T18142] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 376.070271][T18142] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 376.543132][T18164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.612885][T18160] netlink: 'syz.3.3535': attribute type 12 has an invalid length. [ 376.621006][T18160] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3535'. [ 376.808397][T18168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3537'. [ 376.880236][T18172] netlink: 'syz.3.3538': attribute type 14 has an invalid length. [ 376.963524][T18171] syzkaller1: entered promiscuous mode [ 376.970073][T18171] syzkaller1: entered allmulticast mode [ 378.060863][T18210] lo speed is unknown, defaulting to 1000 [ 378.366674][T18210] hsr0 speed is unknown, defaulting to 1000 [ 378.373497][T18210] lo speed is unknown, defaulting to 1000 [ 379.117595][T18210] netlink: 'syz.4.3548': attribute type 6 has an invalid length. [ 379.667997][T18253] netlink: 'syz.2.3560': attribute type 7 has an invalid length. [ 379.800269][T18259] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 380.119236][T18264] lo speed is unknown, defaulting to 1000 [ 380.344291][T18275] lo speed is unknown, defaulting to 1000 [ 380.351497][T18261] netlink: 'syz.4.3562': attribute type 6 has an invalid length. [ 380.355366][T18264] hsr0 speed is unknown, defaulting to 1000 [ 380.461904][T18264] lo speed is unknown, defaulting to 1000 [ 380.554417][T18275] hsr0 speed is unknown, defaulting to 1000 [ 380.562813][T18275] lo speed is unknown, defaulting to 1000 [ 380.802912][T18287] lo speed is unknown, defaulting to 1000 [ 381.052958][T18287] hsr0 speed is unknown, defaulting to 1000 [ 381.092187][T18287] lo speed is unknown, defaulting to 1000 [ 381.406607][T18287] netlink: 'syz.2.3567': attribute type 6 has an invalid length. [ 381.451482][T18312] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 381.485027][T18313] lo speed is unknown, defaulting to 1000 [ 381.562792][T18318] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 381.607594][T18318] netlink: 'syz.0.3576': attribute type 4 has an invalid length. [ 381.766103][T18327] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3579'. [ 381.865097][T18313] hsr0 speed is unknown, defaulting to 1000 [ 381.915378][T18313] lo speed is unknown, defaulting to 1000 [ 382.378798][T18350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.439253][T18352] lo speed is unknown, defaulting to 1000 [ 382.609304][T18365] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3591'. [ 382.620565][T18365] netlink: 'syz.1.3591': attribute type 1 has an invalid length. [ 382.694925][T18352] hsr0 speed is unknown, defaulting to 1000 [ 382.705487][T18352] lo speed is unknown, defaulting to 1000 [ 383.009717][T18352] netlink: 'syz.0.3587': attribute type 6 has an invalid length. [ 383.162067][T18385] netlink: 'syz.4.3599': attribute type 21 has an invalid length. [ 383.318531][T18396] netlink: 'syz.1.3602': attribute type 10 has an invalid length. [ 383.575107][T18410] netlink: 'syz.0.3608': attribute type 3 has an invalid length. [ 383.640598][T18415] lo speed is unknown, defaulting to 1000 [ 383.916714][T18420] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3609'. [ 383.948422][T18415] hsr0 speed is unknown, defaulting to 1000 [ 383.955486][T18415] lo speed is unknown, defaulting to 1000 [ 384.001787][T18435] lo speed is unknown, defaulting to 1000 [ 384.186526][T18415] netlink: 'syz.4.3610': attribute type 6 has an invalid length. [ 384.356865][T18435] hsr0 speed is unknown, defaulting to 1000 [ 384.370305][T18435] lo speed is unknown, defaulting to 1000 [ 384.778724][T18455] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 384.877724][T18457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3621'. [ 384.971851][T18435] netlink: 'syz.3.3616': attribute type 6 has an invalid length. [ 385.134406][T18471] lo speed is unknown, defaulting to 1000 [ 385.571168][T18471] hsr0 speed is unknown, defaulting to 1000 [ 385.576126][T18475] lo speed is unknown, defaulting to 1000 [ 385.579503][T18471] lo speed is unknown, defaulting to 1000 [ 385.640450][T18484] netlink: 'syz.4.3628': attribute type 6 has an invalid length. [ 385.739481][T18489] netlink: 'syz.2.3630': attribute type 6 has an invalid length. [ 385.886711][T18491] lo speed is unknown, defaulting to 1000 [ 385.976226][T18491] hsr0 speed is unknown, defaulting to 1000 [ 385.998995][T18475] hsr0 speed is unknown, defaulting to 1000 [ 386.015679][T18491] lo speed is unknown, defaulting to 1000 [ 386.056460][T18475] lo speed is unknown, defaulting to 1000 [ 386.207996][T18506] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 386.222549][T18506] bridge0: entered allmulticast mode [ 386.648575][T18523] lo speed is unknown, defaulting to 1000 [ 386.922207][T18523] hsr0 speed is unknown, defaulting to 1000 [ 386.955196][T18523] lo speed is unknown, defaulting to 1000 [ 387.042184][T18539] lo speed is unknown, defaulting to 1000 [ 387.077601][T18546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3651'. [ 387.235061][T18539] hsr0 speed is unknown, defaulting to 1000 [ 387.249024][T18539] lo speed is unknown, defaulting to 1000 [ 387.345531][T18555] syzkaller1: entered promiscuous mode [ 387.351540][T18555] syzkaller1: entered allmulticast mode [ 387.495477][T18568] lo speed is unknown, defaulting to 1000 [ 387.523656][T18552] netlink: 'syz.0.3648': attribute type 6 has an invalid length. [ 387.675417][T18568] hsr0 speed is unknown, defaulting to 1000 [ 387.704088][T18574] lo speed is unknown, defaulting to 1000 [ 387.737865][T18568] lo speed is unknown, defaulting to 1000 [ 387.785886][T18584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3663'. [ 387.987408][T18574] hsr0 speed is unknown, defaulting to 1000 [ 387.994703][T18574] lo speed is unknown, defaulting to 1000 [ 388.075745][T18594] netlink: 424 bytes leftover after parsing attributes in process `syz.0.3667'. [ 388.096496][T18594] netlink: 424 bytes leftover after parsing attributes in process `syz.0.3667'. [ 388.114743][T18595] lo speed is unknown, defaulting to 1000 [ 388.166864][T18600] openvswitch: netlink: EtherType 50a is less than min 600 [ 388.227320][T18574] netlink: 'syz.3.3659': attribute type 6 has an invalid length. [ 388.322481][T18602] syzkaller1: entered promiscuous mode [ 388.328179][T18602] syzkaller1: entered allmulticast mode [ 388.346834][T18595] hsr0 speed is unknown, defaulting to 1000 [ 388.482477][T18595] lo speed is unknown, defaulting to 1000 [ 388.621907][T18614] netlink: 'syz.0.3672': attribute type 10 has an invalid length. [ 388.682796][T18619] bridge0: entered promiscuous mode [ 388.699853][T18619] vlan3: entered promiscuous mode [ 388.739015][T18619] bridge0: port 1(vlan3) entered blocking state [ 388.781782][T18619] bridge0: port 1(vlan3) entered disabled state [ 388.789020][T18619] vlan3: entered allmulticast mode [ 388.801882][T18619] bridge0: entered allmulticast mode [ 388.812461][T18619] vlan3: left allmulticast mode [ 388.843908][T18619] bridge0: left allmulticast mode [ 389.165090][T18639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3679'. [ 389.348556][T18645] lo speed is unknown, defaulting to 1000 [ 389.600810][T18640] lo speed is unknown, defaulting to 1000 [ 389.614284][T18654] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 389.634095][T18654] tipc: Resetting bearer [ 389.646557][T18654] netlink: 'syz.2.3682': attribute type 10 has an invalid length. [ 389.654607][T18654] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 389.669150][T18654] bond0: (slave wlan1): Opening slave failed [ 389.709124][T18659] syzkaller1: entered promiscuous mode [ 389.739116][T18659] syzkaller1: entered allmulticast mode [ 389.789186][T18640] hsr0 speed is unknown, defaulting to 1000 [ 389.815653][T18662] lo speed is unknown, defaulting to 1000 [ 389.816181][T18645] hsr0 speed is unknown, defaulting to 1000 [ 389.821962][T18640] lo speed is unknown, defaulting to 1000 [ 389.845982][T18665] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 389.904652][T18665] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 389.911961][T18665] batman_adv: batadv0: Removing interface: ip6gretap1 [ 389.995947][T18670] netlink: 'syz.3.3686': attribute type 10 has an invalid length. [ 390.044803][T18645] lo speed is unknown, defaulting to 1000 [ 390.074526][T18670] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 390.088843][T18670] bond0: (slave wlan1): Opening slave failed [ 390.096260][T18662] hsr0 speed is unknown, defaulting to 1000 [ 390.103983][T18662] lo speed is unknown, defaulting to 1000 [ 390.281508][T18669] netlink: 'syz.2.3685': attribute type 6 has an invalid length. [ 390.325418][T18680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3688'. [ 390.547882][T18687] lo speed is unknown, defaulting to 1000 [ 390.816730][T18697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3694'. [ 390.847641][T18702] syzkaller1: entered promiscuous mode [ 390.853311][T18702] syzkaller1: entered allmulticast mode [ 391.131246][T18687] hsr0 speed is unknown, defaulting to 1000 [ 391.176612][T18687] lo speed is unknown, defaulting to 1000 [ 391.201640][T18720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3702'. [ 391.351306][T18727] lo speed is unknown, defaulting to 1000 [ 391.584349][T18727] hsr0 speed is unknown, defaulting to 1000 [ 391.653256][T18727] lo speed is unknown, defaulting to 1000 [ 391.857990][T18727] netlink: 'syz.0.3706': attribute type 6 has an invalid length. [ 391.893219][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3710'. [ 391.902337][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'. [ 391.927500][T18745] syzkaller1: entered promiscuous mode [ 391.933153][T18745] syzkaller1: entered allmulticast mode [ 392.395706][T18785] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 392.842303][T18816] lo speed is unknown, defaulting to 1000 [ 393.018115][T18816] hsr0 speed is unknown, defaulting to 1000 [ 393.035467][T18816] lo speed is unknown, defaulting to 1000 [ 393.364645][T18816] netlink: 'syz.3.3741': attribute type 6 has an invalid length. [ 394.347750][T18914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3778'. [ 394.420781][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3780'. [ 394.432587][T18918] bridge0: port 1(macvlan2) entered blocking state [ 394.439534][T18918] bridge0: port 1(macvlan2) entered disabled state [ 394.446750][T18918] macvlan2: entered allmulticast mode [ 394.452238][T18918] bridge0: entered allmulticast mode [ 394.460367][T18918] macvlan2: left allmulticast mode [ 394.465511][T18918] bridge0: left allmulticast mode [ 394.601315][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'. [ 394.623922][T18930] netlink: 'syz.1.3785': attribute type 5 has an invalid length. [ 394.648548][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3786'. [ 394.659460][T18928] netlink: 'syz.0.3786': attribute type 18 has an invalid length. [ 395.161984][T18954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3793'. [ 395.421039][T18973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3800'. [ 395.703212][T18980] tipc: Resetting bearer [ 395.757907][T18980] veth0_vlan: left promiscuous mode [ 395.896319][T18991] syzkaller1: entered promiscuous mode [ 395.901822][T18991] syzkaller1: entered allmulticast mode [ 396.322808][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3818'. [ 396.388954][T19020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3820'. [ 396.734559][T19040] lo speed is unknown, defaulting to 1000 [ 397.053593][T19040] hsr0 speed is unknown, defaulting to 1000 [ 397.067033][T19040] lo speed is unknown, defaulting to 1000 [ 398.077648][T19097] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3847'. [ 398.250151][ T30] audit: type=1800 audit(1756344389.012:2): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3846" name="memory.events" dev="tmpfs" ino=4003 res=0 errno=0 [ 398.521363][T19115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3852'. [ 398.785328][T19122] lo speed is unknown, defaulting to 1000 [ 398.860451][T19122] hsr0 speed is unknown, defaulting to 1000 [ 398.867783][T19122] lo speed is unknown, defaulting to 1000 [ 398.872776][T19125] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 398.885474][T19125] batman_adv: batadv0: Removing interface: dummy0 [ 398.897950][T19125] bond0: (slave batadv_slave_0): Releasing backup interface [ 398.907197][T19125] bond2: left allmulticast mode [ 398.912238][T19125] bond2: left promiscuous mode [ 398.919500][T19125] bridge2: port 1(bond2) entered disabled state [ 398.928637][T19125] batman_adv: batadv0: Removing interface: ip6gretap2 [ 398.944066][T19125] netlink: 'syz.1.3856': attribute type 10 has an invalid length. [ 399.019896][T19125] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 399.042850][T19125] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 399.212431][T19122] netlink: 'syz.2.3855': attribute type 6 has an invalid length. [ 399.402045][T19149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3864'. [ 400.259717][T19175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3873'. [ 400.520517][T19195] lo speed is unknown, defaulting to 1000 [ 400.694197][T19195] hsr0 speed is unknown, defaulting to 1000 [ 400.724540][T19195] lo speed is unknown, defaulting to 1000 [ 401.102425][T19207] netlink: 'syz.4.3882': attribute type 6 has an invalid length. [ 401.472136][T19223] lo speed is unknown, defaulting to 1000 [ 401.573245][T19236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3893'. [ 401.896553][T19228] netlink: 'syz.1.3891': attribute type 2 has an invalid length. [ 401.967115][T19223] hsr0 speed is unknown, defaulting to 1000 [ 401.974131][T19223] lo speed is unknown, defaulting to 1000 [ 402.152128][T19250] lo speed is unknown, defaulting to 1000 [ 402.177867][T19259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3900'. [ 402.468454][T19250] hsr0 speed is unknown, defaulting to 1000 [ 402.476398][T19250] lo speed is unknown, defaulting to 1000 [ 402.804290][T19284] lo speed is unknown, defaulting to 1000 [ 402.808404][T19250] netlink: 'syz.4.3897': attribute type 6 has an invalid length. [ 403.204474][T19284] hsr0 speed is unknown, defaulting to 1000 [ 403.255114][T19284] lo speed is unknown, defaulting to 1000 [ 403.360187][T19298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3914'. [ 403.550188][T19290] netlink: 'syz.0.3910': attribute type 6 has an invalid length. [ 403.749611][T19303] lo speed is unknown, defaulting to 1000 [ 404.206136][T19303] hsr0 speed is unknown, defaulting to 1000 [ 404.233177][T19303] lo speed is unknown, defaulting to 1000 [ 404.236374][T19319] lo speed is unknown, defaulting to 1000 [ 404.573958][T19319] hsr0 speed is unknown, defaulting to 1000 [ 404.581304][T19319] lo speed is unknown, defaulting to 1000 [ 404.591097][T19343] lo speed is unknown, defaulting to 1000 [ 404.630902][T19344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3927'. [ 404.861915][T19343] hsr0 speed is unknown, defaulting to 1000 [ 404.978444][T19343] lo speed is unknown, defaulting to 1000 [ 405.436358][T19343] netlink: 'syz.0.3928': attribute type 6 has an invalid length. [ 405.879766][T19386] lo speed is unknown, defaulting to 1000 [ 406.121575][T19386] hsr0 speed is unknown, defaulting to 1000 [ 406.146128][T19386] lo speed is unknown, defaulting to 1000 [ 406.427757][T19409] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3947'. [ 406.543319][T19416] lo speed is unknown, defaulting to 1000 [ 406.685123][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3950'. [ 406.781221][T19423] lo speed is unknown, defaulting to 1000 [ 406.900362][T19423] hsr0 speed is unknown, defaulting to 1000 [ 406.932044][T19423] lo speed is unknown, defaulting to 1000 [ 406.968707][T19416] hsr0 speed is unknown, defaulting to 1000 [ 407.088252][T19416] lo speed is unknown, defaulting to 1000 [ 407.090377][T19441] netlink: 'syz.0.3955': attribute type 10 has an invalid length. [ 407.539389][T19432] netlink: 'syz.2.3951': attribute type 6 has an invalid length. [ 407.588796][T19453] lo speed is unknown, defaulting to 1000 [ 407.868328][T19453] hsr0 speed is unknown, defaulting to 1000 [ 407.875240][T19453] lo speed is unknown, defaulting to 1000 [ 408.030026][T19452] netlink: 'syz.0.3958': attribute type 6 has an invalid length. [ 408.240549][T19471] syzkaller0: entered promiscuous mode [ 408.252928][T19471] syzkaller0: entered allmulticast mode [ 408.359882][T19469] lo speed is unknown, defaulting to 1000 [ 408.474062][T19479] netlink: 'syz.0.3966': attribute type 1 has an invalid length. [ 408.488084][T19479] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3966'. [ 408.524267][T19479] netlink: 'syz.0.3966': attribute type 2 has an invalid length. [ 408.542378][T19479] netlink: 'syz.0.3966': attribute type 1 has an invalid length. [ 408.671022][T19489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3968'. [ 408.812746][T19469] hsr0 speed is unknown, defaulting to 1000 [ 408.839664][T19469] lo speed is unknown, defaulting to 1000 [ 408.839966][T19493] lo speed is unknown, defaulting to 1000 [ 409.125970][T19493] hsr0 speed is unknown, defaulting to 1000 [ 409.132930][T19493] lo speed is unknown, defaulting to 1000 [ 409.177973][T19504] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 409.189394][T19504] netlink: 'syz.2.3974': attribute type 10 has an invalid length. [ 409.198731][T19504] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 409.206909][T19504] bond0: (slave wlan1): Opening slave failed [ 409.322187][T19493] netlink: 'syz.1.3971': attribute type 6 has an invalid length. [ 410.353623][T19545] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3988'. [ 410.382917][T19550] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 410.419933][T19550] bond0: (slave wlan1): Releasing backup interface [ 410.502709][T19550] netlink: 'syz.1.3991': attribute type 10 has an invalid length. [ 410.504186][T19551] lo speed is unknown, defaulting to 1000 [ 410.519276][T19550] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 410.587181][T19550] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 410.806663][T19560] netlink: 'syz.0.3990': attribute type 6 has an invalid length. [ 410.979759][T19576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3996'. [ 411.024849][T19549] lo speed is unknown, defaulting to 1000 [ 411.025406][T19551] hsr0 speed is unknown, defaulting to 1000 [ 411.054325][T19564] netlink: 'syz.3.3989': attribute type 6 has an invalid length. [ 411.160035][T19551] lo speed is unknown, defaulting to 1000 [ 411.292523][T19584] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3999'. [ 411.343373][T19584] openvswitch: netlink: Message has 5 unknown bytes. [ 411.369787][T19549] hsr0 speed is unknown, defaulting to 1000 [ 411.379752][T19549] lo speed is unknown, defaulting to 1000 [ 411.391687][T19588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4001'. [ 411.628729][T19599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4004'. [ 411.641982][T19595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4002'. [ 411.860071][T19609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4007'. [ 411.876343][T19606] lo speed is unknown, defaulting to 1000 [ 412.021198][T19606] hsr0 speed is unknown, defaulting to 1000 [ 412.042312][T19615] lo speed is unknown, defaulting to 1000 [ 412.055390][T19606] lo speed is unknown, defaulting to 1000 [ 412.262148][T19615] hsr0 speed is unknown, defaulting to 1000 [ 412.269642][T19615] lo speed is unknown, defaulting to 1000 [ 412.340191][T19606] netlink: 'syz.1.4006': attribute type 6 has an invalid length. [ 412.735744][T19629] lo speed is unknown, defaulting to 1000 [ 412.838312][T19629] hsr0 speed is unknown, defaulting to 1000 [ 412.840965][T19630] lo speed is unknown, defaulting to 1000 [ 412.845203][T19629] lo speed is unknown, defaulting to 1000 [ 412.913994][T19641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.158623][T19642] lo speed is unknown, defaulting to 1000 [ 413.285709][T19642] hsr0 speed is unknown, defaulting to 1000 [ 413.309407][T19642] lo speed is unknown, defaulting to 1000 [ 413.427023][T19630] hsr0 speed is unknown, defaulting to 1000 [ 413.464488][T19630] lo speed is unknown, defaulting to 1000 [ 413.561693][T19666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4019'. [ 413.576348][T19630] netlink: 'syz.2.4011': attribute type 6 has an invalid length. [ 413.630917][T19668] lo speed is unknown, defaulting to 1000 [ 413.990764][T19668] hsr0 speed is unknown, defaulting to 1000 [ 414.007517][T19668] lo speed is unknown, defaulting to 1000 [ 414.052244][T19681] lo speed is unknown, defaulting to 1000 [ 414.261329][T19681] hsr0 speed is unknown, defaulting to 1000 [ 414.268545][T19681] lo speed is unknown, defaulting to 1000 [ 414.405342][T19668] netlink: 'syz.3.4020': attribute type 6 has an invalid length. [ 414.776577][T19707] lo speed is unknown, defaulting to 1000 [ 415.059340][T19705] lo speed is unknown, defaulting to 1000 [ 415.100178][T19707] hsr0 speed is unknown, defaulting to 1000 [ 415.131752][T19707] lo speed is unknown, defaulting to 1000 [ 415.227107][T19722] lo speed is unknown, defaulting to 1000 [ 415.356226][T19716] netlink: 'syz.4.4030': attribute type 6 has an invalid length. [ 415.486305][T19705] hsr0 speed is unknown, defaulting to 1000 [ 415.498327][T19705] lo speed is unknown, defaulting to 1000 [ 415.580540][T19718] netlink: 'syz.3.4033': attribute type 6 has an invalid length. [ 415.626385][T19722] hsr0 speed is unknown, defaulting to 1000 [ 415.648597][T19722] lo speed is unknown, defaulting to 1000 [ 416.340793][T19756] lo speed is unknown, defaulting to 1000 [ 416.459630][T19763] tipc: Enabling of bearer rejected, already enabled [ 416.617584][T19756] hsr0 speed is unknown, defaulting to 1000 [ 416.624431][T19756] lo speed is unknown, defaulting to 1000 [ 416.676113][T19773] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4045'. [ 416.898216][T19770] lo speed is unknown, defaulting to 1000 [ 417.090429][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4049'. [ 417.125384][T19770] hsr0 speed is unknown, defaulting to 1000 [ 417.151514][T19780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4048'. [ 417.167207][T19785] bridge3: port 1(veth7) entered blocking state [ 417.173622][T19785] bridge3: port 1(veth7) entered disabled state [ 417.180380][T19785] veth7: entered allmulticast mode [ 417.186930][T19785] veth7: entered promiscuous mode [ 417.195373][T19770] lo speed is unknown, defaulting to 1000 [ 417.201405][T19789] veth0_to_bond: left allmulticast mode [ 417.209692][T19789] veth0_to_bond: left promiscuous mode [ 417.215474][T19789] bridge2: port 2(veth0_to_bond) entered disabled state [ 417.241550][T19789] bridge3: port 2(veth0_to_bond) entered blocking state [ 417.256042][T19789] bridge3: port 2(veth0_to_bond) entered disabled state [ 417.266592][T19776] netlink: 'syz.0.4046': attribute type 6 has an invalid length. [ 417.297125][T19789] veth0_to_bond: entered allmulticast mode [ 417.309323][T19789] veth0_to_bond: entered promiscuous mode [ 417.641123][T19808] tipc: Enabling of bearer rejected, already enabled [ 417.699005][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4051'. [ 417.748768][T19816] vlan3: entered promiscuous mode [ 417.754015][T19816] batadv0: entered promiscuous mode [ 417.780608][T19818] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 417.934782][T19824] lo speed is unknown, defaulting to 1000 [ 418.053377][T19824] hsr0 speed is unknown, defaulting to 1000 [ 418.060952][T19824] lo speed is unknown, defaulting to 1000 [ 418.152892][T19831] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 418.321435][T19831] netlink: 'syz.1.4059': attribute type 10 has an invalid length. [ 418.329455][T19831] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 418.350325][T19824] netlink: 'syz.0.4058': attribute type 6 has an invalid length. [ 418.681658][T19840] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 418.777486][T19854] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 418.965246][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4067'. [ 419.016256][T19857] gtp0: entered promiscuous mode [ 419.021330][T19857] gtp0: entered allmulticast mode [ 419.140449][T19863] lo speed is unknown, defaulting to 1000 [ 419.523684][T19884] tipc: Enabled bearer , priority 0 [ 419.539701][T19884] syzkaller0: entered promiscuous mode [ 419.592336][T19884] syzkaller0: entered allmulticast mode [ 419.626512][T19884] tipc: Resetting bearer [ 419.637854][T19883] tipc: Resetting bearer [ 419.653326][T19883] tipc: Disabling bearer [ 419.668098][T19864] lo speed is unknown, defaulting to 1000 [ 419.676234][T19863] hsr0 speed is unknown, defaulting to 1000 [ 419.727819][T19863] lo speed is unknown, defaulting to 1000 [ 419.974338][T19874] netlink: 'syz.2.4066': attribute type 6 has an invalid length. [ 419.984361][T19864] hsr0 speed is unknown, defaulting to 1000 [ 419.993150][T19864] lo speed is unknown, defaulting to 1000 [ 420.480719][T19904] lo speed is unknown, defaulting to 1000 [ 420.847482][T19904] hsr0 speed is unknown, defaulting to 1000 [ 420.899168][T19912] netlink: 'syz.2.4076': attribute type 6 has an invalid length. [ 420.919745][T19904] lo speed is unknown, defaulting to 1000 [ 421.076767][T19922] lo speed is unknown, defaulting to 1000 [ 421.102196][T19926] veth0_to_bond: left allmulticast mode [ 421.109873][T19926] veth0_to_bond: left promiscuous mode [ 421.118959][T19926] bridge3: port 2(veth0_to_bond) entered disabled state [ 421.128663][T19926] batman_adv: batadv0: Removing interface: ip6gretap1 [ 421.137747][T19926] veth5: left allmulticast mode [ 421.142730][T19926] veth5: left promiscuous mode [ 421.148855][T19926] bridge2: port 1(veth5) entered disabled state [ 421.167505][T19924] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4080'. [ 421.223084][T19926] vlan2: left promiscuous mode [ 421.234767][T19926] veth1: left promiscuous mode [ 421.247774][T19926] bridge2: port 3(vlan2) entered disabled state [ 421.313831][T19926] veth7: left allmulticast mode [ 421.338972][T19926] veth7: left promiscuous mode [ 421.344171][T19926] bridge3: port 1(veth7) entered disabled state [ 421.524601][T19922] hsr0 speed is unknown, defaulting to 1000 [ 421.535237][T19922] lo speed is unknown, defaulting to 1000 [ 421.566209][T19940] team0: Mode changed to "loadbalance" [ 421.627959][T19933] netlink: 'syz.1.4077': attribute type 6 has an invalid length. [ 421.721282][T19949] ------------[ cut here ]------------ [ 421.727030][T19949] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 421.735483][T19949] WARNING: CPU: 0 PID: 19949 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 421.746362][T19949] Modules linked in: [ 421.750295][T19949] CPU: 0 UID: 0 PID: 19949 Comm: syz.2.4082 Not tainted syzkaller #0 PREEMPT(full) [ 421.759968][T19949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.769601][T19952] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4083'. [ 421.770367][T19949] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 421.779308][T19952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4083'. [ 421.795106][T19949] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 2b b0 8c e8 96 2e 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 87 8f d7 f6 90 0f 0b 90 42 80 7c 3d [ 421.815265][T19949] RSP: 0018:ffffc9001cbdef80 EFLAGS: 00010246 [ 421.821552][T19949] RAX: 54264db3c6a55000 RBX: 0000000000000000 RCX: 0000000000080000 [ 421.829587][T19949] RDX: ffffc90010513000 RSI: 000000000000a87a RDI: 000000000000a87b [ 421.837874][T19949] RBP: ffff888055331728 R08: 0000000000000003 R09: 0000000000000004 [ 421.845916][T19949] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880553329d0 [ 421.854075][T19949] R13: ffff888055330d80 R14: 1ffff1100aa662e5 R15: dffffc0000000000 [ 421.862204][T19949] FS: 00007f6ca72556c0(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 421.871288][T19949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.877935][T19949] CR2: 00007efd1e6e56c0 CR3: 00000000502a0000 CR4: 00000000003526f0 [ 421.885942][T19949] Call Trace: [ 421.889227][T19949] [ 421.892158][T19949] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 421.898283][T19949] __ieee80211_link_release_channel+0x33b/0x4a0 [ 421.904668][T19949] ? __pfx_ieee80211_uninit+0x10/0x10 [ 421.910101][T19949] unregister_netdevice_many_notify+0x1950/0x1ff0 [ 421.916696][T19949] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 421.923481][T19949] ? __pfx_call_rcu+0x10/0x10 [ 421.928244][T19949] unregister_netdevice_queue+0x33c/0x380 [ 421.933996][T19949] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 421.940302][T19949] _cfg80211_unregister_wdev+0x165/0x590 [ 421.945992][T19949] ieee80211_if_remove+0x256/0x310 [ 421.951152][T19949] ieee80211_del_iface+0x19/0x30 [ 421.956174][T19949] cfg80211_remove_virtual_intf+0x231/0x3f0 [ 421.962087][T19949] genl_family_rcv_msg_doit+0x212/0x300 [ 421.967785][T19949] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 421.973878][T19949] ? bpf_lsm_capable+0x9/0x20 [ 421.978700][T19949] ? security_capable+0x7e/0x2e0 [ 421.983738][T19949] genl_rcv_msg+0x60e/0x790 [ 421.988426][T19949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.993566][T19949] ? __kasan_slab_alloc+0x6c/0x80 [ 421.998694][T19949] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 422.004088][T19949] ? __pfx_nl80211_del_interface+0x10/0x10 [ 422.010044][T19949] ? __pfx_nl80211_post_doit+0x10/0x10 [ 422.015522][T19949] ? __netlink_lookup+0xbd/0x810 [ 422.020567][T19949] ? rcu_is_watching+0x15/0xb0 [ 422.025347][T19949] netlink_rcv_skb+0x205/0x470 [ 422.030209][T19949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.035266][T19949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.040662][T19949] ? lock_release+0x4b/0x3e0 [ 422.045284][T19949] ? down_read+0x1ad/0x2e0 [ 422.049811][T19949] genl_rcv+0x28/0x40 [ 422.053809][T19949] netlink_unicast+0x82f/0x9e0 [ 422.058658][T19949] ? __pfx_netlink_unicast+0x10/0x10 [ 422.063964][T19949] ? netlink_sendmsg+0x642/0xb30 [ 422.068970][T19949] ? skb_put+0x11b/0x210 [ 422.073232][T19949] netlink_sendmsg+0x805/0xb30 [ 422.078046][T19949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.083341][T19949] ? aa_sock_msg_perm+0xf1/0x1d0 [ 422.088387][T19949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.093778][T19949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.099211][T19949] __sock_sendmsg+0x219/0x270 [ 422.103930][T19949] ____sys_sendmsg+0x505/0x830 [ 422.108785][T19949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.114185][T19949] ? import_iovec+0x74/0xa0 [ 422.118753][T19949] ___sys_sendmsg+0x21f/0x2a0 [ 422.123446][T19949] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.128730][T19949] ? futex_wake+0x4b2/0x560 [ 422.133363][T19949] ? __fget_files+0x2a/0x420 [ 422.138020][T19949] ? __fget_files+0x3a0/0x420 [ 422.142709][T19949] __x64_sys_sendmsg+0x19b/0x260 [ 422.147724][T19949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.153303][T19949] ? rcu_is_watching+0x15/0xb0 [ 422.158590][T19949] ? rcu_is_watching+0x15/0xb0 [ 422.163367][T19949] do_syscall_64+0xfa/0x3b0 [ 422.167958][T19949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.174041][T19949] ? clear_bhb_loop+0x60/0xb0 [ 422.178809][T19949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.184716][T19949] RIP: 0033:0x7f6ca638ebe9 [ 422.189218][T19949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.208877][T19949] RSP: 002b:00007f6ca7255038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.217342][T19949] RAX: ffffffffffffffda RBX: 00007f6ca65b6180 RCX: 00007f6ca638ebe9 [ 422.225330][T19949] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 422.233524][T19949] RBP: 00007f6ca6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 422.241549][T19949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.249571][T19949] R13: 00007f6ca65b6218 R14: 00007f6ca65b6180 R15: 00007ffdefabeff8 [ 422.257615][T19949] [ 422.260646][T19949] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 422.267942][T19949] CPU: 0 UID: 0 PID: 19949 Comm: syz.2.4082 Not tainted syzkaller #0 PREEMPT(full) [ 422.277321][T19949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.287384][T19949] Call Trace: [ 422.290669][T19949] [ 422.293608][T19949] dump_stack_lvl+0x99/0x250 [ 422.298211][T19949] ? __asan_memcpy+0x40/0x70 [ 422.302826][T19949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.308040][T19949] ? __pfx__printk+0x10/0x10 [ 422.312673][T19949] vpanic+0x281/0x750 [ 422.316765][T19949] ? __pfx__printk+0x10/0x10 [ 422.321382][T19949] ? __pfx_vpanic+0x10/0x10 [ 422.325907][T19949] ? is_bpf_text_address+0x26/0x2b0 [ 422.331122][T19949] panic+0xb9/0xc0 [ 422.334836][T19949] ? __pfx_panic+0x10/0x10 [ 422.339245][T19949] __warn+0x31b/0x4b0 [ 422.343217][T19949] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 422.348954][T19949] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 422.354660][T19949] report_bug+0x2be/0x4f0 [ 422.359013][T19949] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 422.364721][T19949] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 422.370519][T19949] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 422.376235][T19949] handle_bug+0x84/0x160 [ 422.380490][T19949] exc_invalid_op+0x1a/0x50 [ 422.384980][T19949] asm_exc_invalid_op+0x1a/0x20 [ 422.389821][T19949] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 422.396153][T19949] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 2b b0 8c e8 96 2e 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 87 8f d7 f6 90 0f 0b 90 42 80 7c 3d [ 422.415840][T19949] RSP: 0018:ffffc9001cbdef80 EFLAGS: 00010246 [ 422.421900][T19949] RAX: 54264db3c6a55000 RBX: 0000000000000000 RCX: 0000000000080000 [ 422.429866][T19949] RDX: ffffc90010513000 RSI: 000000000000a87a RDI: 000000000000a87b [ 422.437837][T19949] RBP: ffff888055331728 R08: 0000000000000003 R09: 0000000000000004 [ 422.445802][T19949] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880553329d0 [ 422.453768][T19949] R13: ffff888055330d80 R14: 1ffff1100aa662e5 R15: dffffc0000000000 [ 422.461754][T19949] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 422.467751][T19949] __ieee80211_link_release_channel+0x33b/0x4a0 [ 422.473997][T19949] ? __pfx_ieee80211_uninit+0x10/0x10 [ 422.479365][T19949] unregister_netdevice_many_notify+0x1950/0x1ff0 [ 422.485775][T19949] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 422.492546][T19949] ? __pfx_call_rcu+0x10/0x10 [ 422.497231][T19949] unregister_netdevice_queue+0x33c/0x380 [ 422.502965][T19949] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 422.509220][T19949] _cfg80211_unregister_wdev+0x165/0x590 [ 422.514886][T19949] ieee80211_if_remove+0x256/0x310 [ 422.520039][T19949] ieee80211_del_iface+0x19/0x30 [ 422.524982][T19949] cfg80211_remove_virtual_intf+0x231/0x3f0 [ 422.530966][T19949] genl_family_rcv_msg_doit+0x212/0x300 [ 422.536517][T19949] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 422.542593][T19949] ? bpf_lsm_capable+0x9/0x20 [ 422.547267][T19949] ? security_capable+0x7e/0x2e0 [ 422.552200][T19949] genl_rcv_msg+0x60e/0x790 [ 422.556782][T19949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.561823][T19949] ? __kasan_slab_alloc+0x6c/0x80 [ 422.566842][T19949] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 422.572240][T19949] ? __pfx_nl80211_del_interface+0x10/0x10 [ 422.578052][T19949] ? __pfx_nl80211_post_doit+0x10/0x10 [ 422.583523][T19949] ? __netlink_lookup+0xbd/0x810 [ 422.588469][T19949] ? rcu_is_watching+0x15/0xb0 [ 422.593239][T19949] netlink_rcv_skb+0x205/0x470 [ 422.598003][T19949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.603032][T19949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.608328][T19949] ? lock_release+0x4b/0x3e0 [ 422.612918][T19949] ? down_read+0x1ad/0x2e0 [ 422.617336][T19949] genl_rcv+0x28/0x40 [ 422.621306][T19949] netlink_unicast+0x82f/0x9e0 [ 422.626063][T19949] ? __pfx_netlink_unicast+0x10/0x10 [ 422.631350][T19949] ? netlink_sendmsg+0x642/0xb30 [ 422.636270][T19949] ? skb_put+0x11b/0x210 [ 422.640499][T19949] netlink_sendmsg+0x805/0xb30 [ 422.645259][T19949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.650547][T19949] ? aa_sock_msg_perm+0xf1/0x1d0 [ 422.655484][T19949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.660847][T19949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.666146][T19949] __sock_sendmsg+0x219/0x270 [ 422.670857][T19949] ____sys_sendmsg+0x505/0x830 [ 422.675619][T19949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.680903][T19949] ? import_iovec+0x74/0xa0 [ 422.685517][T19949] ___sys_sendmsg+0x21f/0x2a0 [ 422.690214][T19949] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.695446][T19949] ? futex_wake+0x4b2/0x560 [ 422.699956][T19949] ? __fget_files+0x2a/0x420 [ 422.704549][T19949] ? __fget_files+0x3a0/0x420 [ 422.709233][T19949] __x64_sys_sendmsg+0x19b/0x260 [ 422.714191][T19949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.719673][T19949] ? rcu_is_watching+0x15/0xb0 [ 422.724446][T19949] ? rcu_is_watching+0x15/0xb0 [ 422.729202][T19949] do_syscall_64+0xfa/0x3b0 [ 422.733697][T19949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.739749][T19949] ? clear_bhb_loop+0x60/0xb0 [ 422.744413][T19949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.750392][T19949] RIP: 0033:0x7f6ca638ebe9 [ 422.754809][T19949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.774430][T19949] RSP: 002b:00007f6ca7255038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.782849][T19949] RAX: ffffffffffffffda RBX: 00007f6ca65b6180 RCX: 00007f6ca638ebe9 [ 422.790822][T19949] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 422.798784][T19949] RBP: 00007f6ca6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 422.806741][T19949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.814699][T19949] R13: 00007f6ca65b6218 R14: 00007f6ca65b6180 R15: 00007ffdefabeff8 [ 422.822665][T19949] [ 422.825960][T19949] Kernel Offset: disabled [ 422.830270][T19949] Rebooting in 86400 seconds..